--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"info","ts":"2026-07-07T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/590cc5eb9f5329fff7e0944699cca201718312f03857270ee350d69a583974fc"} {"level":"info","ts":"2026-07-07T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b37b8ff2eadc2f8298028ee2dd6b5d8e9b04efb2c835420e14632a98622a28a"} {"level":"info","ts":"2026-07-07T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/004aef20870c2527d488ba44d0c4592f91d6ffa0ffe2452a6c8c3ff3d6c5c7d5"} {"level":"info","ts":"2026-07-07T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dbd1b6d3a9015a17ec2f05ecb7e1967e4aacf9092bf8e97332e759f10cf80ca"} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a"} {"level":"info","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a"} {"level":"info","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a"} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"error","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427"} {"level":"info","ts":"2026-07-07T00:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"} {"level":"debug","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"info","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"info","ts":"2026-07-07T00:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"error","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41512","PortSpecifier":{"PortValue":41512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41512","PortSpecifier":{"PortValue":41512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383473,"nanos":997137669},"http":{"id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1134cc65-de2f-4b00-8103-0abc1b0c1018","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42946","PortSpecifier":{"PortValue":42946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42946","PortSpecifier":{"PortValue":42946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383474,"nanos":58944682},"http":{"id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"051afd8b-6638-49f0-97c0-e03005b1c5d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41520","PortSpecifier":{"PortValue":41520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","method":"GET","path":"/maas-api/v1/api-keys/dda6aa79-107e-411a-b32c-67d27bde84f3","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41520","PortSpecifier":{"PortValue":41520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383474,"nanos":146140127},"http":{"id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","method":"GET","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dda6aa79-107e-411a-b32c-67d27bde84f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dda6aa79-107e-411a-b32c-67d27bde84f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a08da38-1f7a-4979-878e-0c7e53b2e80f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3f87762-919f-4d38-8fcc-12602e136302","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3f87762-919f-4d38-8fcc-12602e136302","method":"GET","path":"/maas-api/v1/api-keys/040ecaa2-aa45-4a68-807c-aad94e351617","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3f87762-919f-4d38-8fcc-12602e136302","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383474,"nanos":179113958},"http":{"id":"f3f87762-919f-4d38-8fcc-12602e136302","method":"GET","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/040ecaa2-aa45-4a68-807c-aad94e351617",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3f87762-919f-4d38-8fcc-12602e136302","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3f87762-919f-4d38-8fcc-12602e136302","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/040ecaa2-aa45-4a68-807c-aad94e351617",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3f87762-919f-4d38-8fcc-12602e136302","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3f87762-919f-4d38-8fcc-12602e136302","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:17:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3f87762-919f-4d38-8fcc-12602e136302","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59890","PortSpecifier":{"PortValue":59890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30d1433a-5d97-463b-9d9b-3b966afffd07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59890","PortSpecifier":{"PortValue":59890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383489,"nanos":237821033},"http":{"id":"30d1433a-5d97-463b-9d9b-3b966afffd07","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30d1433a-5d97-463b-9d9b-3b966afffd07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40060","PortSpecifier":{"PortValue":40060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40060","PortSpecifier":{"PortValue":40060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383489,"nanos":274573468},"http":{"id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d73c21d4-72dd-4922-be8d-4d4eaded179f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59904","PortSpecifier":{"PortValue":59904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59904","PortSpecifier":{"PortValue":59904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383489,"nanos":309918260},"http":{"id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","method":"GET","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JNZ566kQz46LUceO_gd75BUYRQ0vaFFSbtWo8tUmeWO4OwM0SCQLwutQVB8d"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JNZ566kQz46LUceO_gd75BUYRQ0vaFFSbtWo8tUmeWO4OwM0SCQLwutQVB8d\"}"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e4c7ab3-b94f-4487-a526-af0eb5a69b4d","keyName":"e2e-auth-iso-a-867aee","subscription":"e2e-auth-iso-ce01b0","tenant":"e2e-shared-a-72e474","userId":"3e4c7ab3-b94f-4487-a526-af0eb5a69b4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ce01b0"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b3cd8f-d3d6-493d-8daf-452af5c2f133","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48880","PortSpecifier":{"PortValue":48880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48880","PortSpecifier":{"PortValue":48880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383504,"nanos":314353826},"http":{"id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be86a48a-4fce-4898-80b1-1afecf8e60d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383504,"nanos":352767741},"http":{"id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dcba685-596c-433d-aa3d-b738f9eefe7f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47264","PortSpecifier":{"PortValue":47264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90c83a2e-b445-4115-bd01-79388ca38b14","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47264","PortSpecifier":{"PortValue":47264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383504,"nanos":389968522},"http":{"id":"90c83a2e-b445-4115-bd01-79388ca38b14","method":"GET","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NEzJzwMTMSrHCgKs_WNCRM9SZfwMnOChW3opbQF0ZH2aWpJ5gWM4kxd9XU6d"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NEzJzwMTMSrHCgKs_WNCRM9SZfwMnOChW3opbQF0ZH2aWpJ5gWM4kxd9XU6d\"}"} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T00:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90c83a2e-b445-4115-bd01-79388ca38b14","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36632","PortSpecifier":{"PortValue":36632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0ece58f-0b9e-4970-b79e-06623498c95d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36632","PortSpecifier":{"PortValue":36632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383519,"nanos":406196472},"http":{"id":"a0ece58f-0b9e-4970-b79e-06623498c95d","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0ece58f-0b9e-4970-b79e-06623498c95d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52364","PortSpecifier":{"PortValue":52364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52364","PortSpecifier":{"PortValue":52364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383519,"nanos":443502536},"http":{"id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1206b06-4649-4184-9934-9f6f2d2d5f55","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36636","PortSpecifier":{"PortValue":36636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36636","PortSpecifier":{"PortValue":36636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383519,"nanos":484020544},"http":{"id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010146b0-2acc-4f0f-abe4-93cf43b477a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52368","PortSpecifier":{"PortValue":52368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52368","PortSpecifier":{"PortValue":52368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383519,"nanos":519224047},"http":{"id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d22cef4-9fb9-4b58-9373-6a299cbbc7a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38752","PortSpecifier":{"PortValue":38752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38752","PortSpecifier":{"PortValue":38752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383534,"nanos":598619002},"http":{"id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef3c50df-1023-43fd-a1d0-6041fb95d36b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee373468-e264-404f-aee6-bd3e29c31594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35366","PortSpecifier":{"PortValue":35366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee373468-e264-404f-aee6-bd3e29c31594","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee373468-e264-404f-aee6-bd3e29c31594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35366","PortSpecifier":{"PortValue":35366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383534,"nanos":636368404},"http":{"id":"ee373468-e264-404f-aee6-bd3e29c31594","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee373468-e264-404f-aee6-bd3e29c31594","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee373468-e264-404f-aee6-bd3e29c31594","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee373468-e264-404f-aee6-bd3e29c31594","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee373468-e264-404f-aee6-bd3e29c31594","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee373468-e264-404f-aee6-bd3e29c31594","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35382","PortSpecifier":{"PortValue":35382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","method":"GET","path":"/maas-api/v1/api-keys/ab510de5-2fa3-43b1-9069-133f68838ba7","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35382","PortSpecifier":{"PortValue":35382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383534,"nanos":677143334},"http":{"id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","method":"GET","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ab510de5-2fa3-43b1-9069-133f68838ba7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ab510de5-2fa3-43b1-9069-133f68838ba7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f56eacdc-40eb-4e8e-8f9a-f56c1f945ef9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38762","PortSpecifier":{"PortValue":38762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","method":"GET","path":"/maas-api/v1/api-keys/ab510de5-2fa3-43b1-9069-133f68838ba7","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38762","PortSpecifier":{"PortValue":38762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383534,"nanos":709696553},"http":{"id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","method":"GET","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ab510de5-2fa3-43b1-9069-133f68838ba7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ab510de5-2fa3-43b1-9069-133f68838ba7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582a2355-f1b7-45e2-b73c-ab6040bd8128","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af500141-581d-4cb3-b538-f32565fdac59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37612","PortSpecifier":{"PortValue":37612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af500141-581d-4cb3-b538-f32565fdac59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af500141-581d-4cb3-b538-f32565fdac59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37612","PortSpecifier":{"PortValue":37612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383549,"nanos":824243188},"http":{"id":"af500141-581d-4cb3-b538-f32565fdac59","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af500141-581d-4cb3-b538-f32565fdac59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af500141-581d-4cb3-b538-f32565fdac59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af500141-581d-4cb3-b538-f32565fdac59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af500141-581d-4cb3-b538-f32565fdac59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af500141-581d-4cb3-b538-f32565fdac59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59674","PortSpecifier":{"PortValue":59674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59674","PortSpecifier":{"PortValue":59674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383549,"nanos":862061852},"http":{"id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/auth-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9d1b7c-06cd-4487-96f8-4fdfc2c51008","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37628","PortSpecifier":{"PortValue":37628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"642172a9-a7e0-4516-8d45-daf1e57eb510","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37628","PortSpecifier":{"PortValue":37628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383549,"nanos":905561498},"http":{"id":"642172a9-a7e0-4516-8d45-daf1e57eb510","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OZ7h7NgTflxYhcYd_RSIGv16JSQxmkui1Ot8SRiUGYGfZQoON9zXYqdKQk1q"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OZ7h7NgTflxYhcYd_RSIGv16JSQxmkui1Ot8SRiUGYGfZQoON9zXYqdKQk1q\"}"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb9e0046-1f9f-43ca-b87e-73a283f799ee","keyName":"e2e-auth-iso-a-c19368","subscription":"e2e-auth-iso-4006f3","tenant":"e2e-shared-a-72e474","userId":"bb9e0046-1f9f-43ca-b87e-73a283f799ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/auth-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4006f3"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"642172a9-a7e0-4516-8d45-daf1e57eb510","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f5957cab7021616ba041eaacf34c32d1ea9dce2eea3ecc2f5e00d6ed2703f7"} {"level":"info","ts":"2026-07-07T00:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ac4f843d52b0a0392a4e1eed72b7dd28082a1845121bcf98cbe6d460366487a"} {"level":"info","ts":"2026-07-07T00:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f387a26e8302d9fcca601d1f234c92a86bbadee151e62a945b465db07f44e906"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddeafa38ee75517d86b76f7ffaa354c1c929af95e6b045c392abef3d58785a89"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77525cbfe85461f7e287d2dfd20532168f70815c7449dbc59480d4159bfe8f8a"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a77d0bcc9c314264de77b0f76bed60b8f9d471d148dbef7e0faf18b7c080824"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e01ac95aa68a7a58671fa1a494624c1727e46f8a760dd5b968fdad94194063b6"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4937bf5a689e11fc4652f3c916318da0e6dcb164cf13cfd7fd311629d3be1369"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c528a377ea5d420fa067edf937409cdb2b5f657c628af8312b95bac94297f7a"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c815fda73659700cd5b91e298a9934dd16c7f50a72b43417298235d13ba49e7"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2725a78b9e58f35c60a5f529774ea4b6e8a29fb5605b340df11b8b5323f8a264"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4132ed59f1f5c3fc67017db150561da3e8d58da17c0dcfe56b2d3fda6b024d2a"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b5b4b5922feda763b8d63a0cd6925ce8e9a4f55b5e32a0ba82c14cb93ef77ee"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69aa34450b631a175bcd73dde0fffd2fd1a4154e3eed5fd74ab3e388d1221427"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe71edcfd9dc6d8ca8f3a3a0a42af67dc61c3318bddb99f4cc8bd92bf615cee"} {"level":"info","ts":"2026-07-07T00:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e721054aa7a06a23f80c4425131595903305f417e98857b6592e55393f08eaf8"} {"level":"debug","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"debug","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"debug","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:19:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:19:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:19:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:19:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"error","ts":"2026-07-07T00:19:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:19:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:19:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"error","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"error","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"} {"level":"debug","ts":"2026-07-07T00:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"debug","ts":"2026-07-07T00:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"debug","ts":"2026-07-07T00:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46548","PortSpecifier":{"PortValue":46548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5951143c-8085-46fe-91a9-87f8b9dd307f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46548","PortSpecifier":{"PortValue":46548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383624,"nanos":56759928},"http":{"id":"5951143c-8085-46fe-91a9-87f8b9dd307f","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/sub-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5951143c-8085-46fe-91a9-87f8b9dd307f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50450","PortSpecifier":{"PortValue":50450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50450","PortSpecifier":{"PortValue":50450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383624,"nanos":97348032},"http":{"id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/sub-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b6069d-2c4c-4198-a3b5-c3d59ecd78be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae8e624-2951-403b-986d-34e35d290231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46556","PortSpecifier":{"PortValue":46556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cae8e624-2951-403b-986d-34e35d290231","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae8e624-2951-403b-986d-34e35d290231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46556","PortSpecifier":{"PortValue":46556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383624,"nanos":167309868},"http":{"id":"cae8e624-2951-403b-986d-34e35d290231","method":"GET","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QIyNqefYyufdBQh2_xTTlzR1AJtuEojGtSLhVZvcykMjBbQVx3Jk8XN1OIy2"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cae8e624-2951-403b-986d-34e35d290231","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QIyNqefYyufdBQh2_xTTlzR1AJtuEojGtSLhVZvcykMjBbQVx3Jk8XN1OIy2\"}"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2934f643-6dfc-487b-8e7a-27667254cd96","keyName":"e2e-sub-iso-7eb929","subscription":"e2e-a-only-e712a1","tenant":"e2e-shared-a-72e474","userId":"2934f643-6dfc-487b-8e7a-27667254cd96","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cae8e624-2951-403b-986d-34e35d290231","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/sub-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae8e624-2951-403b-986d-34e35d290231","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e712a1"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae8e624-2951-403b-986d-34e35d290231","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae8e624-2951-403b-986d-34e35d290231","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50452","PortSpecifier":{"PortValue":50452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50452","PortSpecifier":{"PortValue":50452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383624,"nanos":212449387},"http":{"id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","method":"GET","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U8eqCjGWkqO3YjqV_fPeaHSwDd7NQPCYpfpgvCJe3QszFL7igxz2ZCk7v04R"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U8eqCjGWkqO3YjqV_fPeaHSwDd7NQPCYpfpgvCJe3QszFL7igxz2ZCk7v04R\"}"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"240cd52e-28ed-4a46-b525-bc4b2aea3bdb","keyName":"e2e-sub-iso-7e1277","subscription":"e2e-b-only-e712a1","tenant":"e2e-shared-b-1ea658","userId":"240cd52e-28ed-4a46-b525-bc4b2aea3bdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/sub-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e712a1"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8bb7d2b-4b38-4bcc-a3a4-6ec1fa8eb963","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58662","PortSpecifier":{"PortValue":58662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58662","PortSpecifier":{"PortValue":58662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383634,"nanos":367759869},"http":{"id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/sub-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8dfce79-20dd-4b9e-b1ac-9e9117e55125","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24fe710d-567f-49e4-9c37-5d869322c727","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56752","PortSpecifier":{"PortValue":56752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24fe710d-567f-49e4-9c37-5d869322c727","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24fe710d-567f-49e4-9c37-5d869322c727","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56752","PortSpecifier":{"PortValue":56752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383634,"nanos":405148642},"http":{"id":"24fe710d-567f-49e4-9c37-5d869322c727","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24fe710d-567f-49e4-9c37-5d869322c727","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24fe710d-567f-49e4-9c37-5d869322c727","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/sub-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24fe710d-567f-49e4-9c37-5d869322c727","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24fe710d-567f-49e4-9c37-5d869322c727","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24fe710d-567f-49e4-9c37-5d869322c727","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58666","PortSpecifier":{"PortValue":58666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58666","PortSpecifier":{"PortValue":58666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383634,"nanos":444726105},"http":{"id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rVzb7IU3kXHMZei6_pcIQC7PxkUdxIamYMsnEBavl1aWQGjL7J9zawXecUvl"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rVzb7IU3kXHMZei6_pcIQC7PxkUdxIamYMsnEBavl1aWQGjL7J9zawXecUvl\"}"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8e34aa2-5d90-4e1f-85b3-8b7d1751557e","keyName":"e2e-sub-iso-055e92","subscription":"e2e-shared-sub-a196c0","tenant":"e2e-shared-a-72e474","userId":"f8e34aa2-5d90-4e1f-85b3-8b7d1751557e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/sub-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a196c0"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c1a5583-de89-43b7-ab23-7bf2b2dad057","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56768","PortSpecifier":{"PortValue":56768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56768","PortSpecifier":{"PortValue":56768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383634,"nanos":474949753},"http":{"id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4agSLzXKjt3PFTFz_NJRHKIF92uJ0K05jF6XBQS7qaGRvNSkLBhyQKFRdgIx"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4agSLzXKjt3PFTFz_NJRHKIF92uJ0K05jF6XBQS7qaGRvNSkLBhyQKFRdgIx\"}"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf6f61c2-7e55-4bbc-b3a7-b0927364512d","keyName":"e2e-sub-iso-8dc70a","subscription":"e2e-shared-sub-a196c0","tenant":"e2e-shared-b-1ea658","userId":"bf6f61c2-7e55-4bbc-b3a7-b0927364512d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/sub-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a196c0"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:20:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50dbeb01-5d74-4b5b-8dd3-0098112d689a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/602707fb8c53f1dafe68548760df67973c51c2d3e7a8d9c1b88d9d18fec103f7"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e199c8ebffe184291f618776da1a43ceebf6d5d46a22b3cf5299405e6d561b"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1907dbc22ed1f0849129ec6ab18e097d6ac3bea0209be23eb84371f14466be82"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6606673f10acc8b40f050b1ede301d45f6a0f9ab1df9e1adf7ed7360df216c5a"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fe7bd21754da1a72f2d9bf795833824a03758deceaad195f689e33b56a98a7d"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cced92312a8e6bb2092f08a254e3501e538af2a9a192d4503c5b7ec5afdc9e99"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b9b3165479f1e7ec67e5338cc27e6ba7583f896b99c698238caea66c3ebde3"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5397feef519263577b7d3272d39f3e7b38822f9c1d6c627b34714d9d2aa03144"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82e2f06c603f174241ba22aaccad5ad907721d977f4030cf167b03d66f38a6a5"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f70176eb3532a31ae58fa5728a09270d87788fdf3bc4ef7d0f52a50eb5d5bba4"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67f8b70c97b930c24f86f479937a4d720a491305f5f76b6c12bcbda744c5964b"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53932eaa99be825bea3c33e332cc185ef610ccda4b18852922ec1f5f2eb10bf0"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/517444aa0a4e5e4ddffcbda2a55b100f8f19375332b52411edcf8c3cdd4db246"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/260b29153fba447135dc80a4652127e5586b8dc89f956cfd813c055e32fa3653"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a71a2d750e0a420e5f6d40dedd51a8bbe0e08e479bf5c1632089f9c57289ad3c"} {"level":"info","ts":"2026-07-07T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea37c0d9dbea04647528ee5ed829ba5bd880f2c539d26d6acc113f0cdfb0c297"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"error","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"error","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"error","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"} {"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"} {"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"} {"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"} {"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56606432-86b0-4d34-87f0-6ff748d86026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44834","PortSpecifier":{"PortValue":44834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56606432-86b0-4d34-87f0-6ff748d86026","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56606432-86b0-4d34-87f0-6ff748d86026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44834","PortSpecifier":{"PortValue":44834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383713,"nanos":123399574},"http":{"id":"56606432-86b0-4d34-87f0-6ff748d86026","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56606432-86b0-4d34-87f0-6ff748d86026","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56606432-86b0-4d34-87f0-6ff748d86026","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56606432-86b0-4d34-87f0-6ff748d86026","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56606432-86b0-4d34-87f0-6ff748d86026","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34860","PortSpecifier":{"PortValue":34860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34860","PortSpecifier":{"PortValue":34860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383713,"nanos":164580295},"http":{"id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44846","PortSpecifier":{"PortValue":44846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44846","PortSpecifier":{"PortValue":44846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383713,"nanos":200985682},"http":{"id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz\"}"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","subscription":"e2e-rate-iso-a-35e6ed","tenant":"e2e-shared-a-72e474","userId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-35e6ed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35e6ed"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","selected_subscription":"e2e-rate-iso-a-35e6ed","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-35e6ed@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383714,"nanos":261987441},"http":{"id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz\"}"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","subscription":"e2e-rate-iso-a-35e6ed","tenant":"e2e-shared-a-72e474","userId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-35e6ed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35e6ed"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","selected_subscription":"e2e-rate-iso-a-35e6ed","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-35e6ed@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44858","PortSpecifier":{"PortValue":44858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44858","PortSpecifier":{"PortValue":44858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383715,"nanos":294762275},"http":{"id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz\"}"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","subscription":"e2e-rate-iso-a-35e6ed","tenant":"e2e-shared-a-72e474","userId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-35e6ed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35e6ed"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","selected_subscription":"e2e-rate-iso-a-35e6ed","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-35e6ed@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49920","PortSpecifier":{"PortValue":49920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49920","PortSpecifier":{"PortValue":49920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383726,"nanos":124749599},"http":{"id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48278","PortSpecifier":{"PortValue":48278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48278","PortSpecifier":{"PortValue":48278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383726,"nanos":187413858},"http":{"id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383726,"nanos":219730042},"http":{"id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx\"}"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","subscription":"e2e-rate-iso-a-29b497","tenant":"e2e-shared-a-72e474","userId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29b497"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","selected_subscription":"e2e-rate-iso-a-29b497","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-29b497@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49942","PortSpecifier":{"PortValue":49942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49942","PortSpecifier":{"PortValue":49942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383727,"nanos":263844279},"http":{"id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx\"}"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","subscription":"e2e-rate-iso-a-29b497","tenant":"e2e-shared-a-72e474","userId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29b497"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","selected_subscription":"e2e-rate-iso-a-29b497","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-29b497@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49946","PortSpecifier":{"PortValue":49946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49946","PortSpecifier":{"PortValue":49946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383728,"nanos":303361758},"http":{"id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx\"}"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","subscription":"e2e-rate-iso-a-29b497","tenant":"e2e-shared-a-72e474","userId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29b497"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","selected_subscription":"e2e-rate-iso-a-29b497","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-29b497@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48286","PortSpecifier":{"PortValue":48286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","method":"POST","path":"/ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658/v1/completions","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48286","PortSpecifier":{"PortValue":48286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383728,"nanos":342112609},"http":{"id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zZyAwbittfc3d7G7_4Uyni1oX3pp3GcWC6efH9YtI1ckhTMVehggiP247Vrs"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zZyAwbittfc3d7G7_4Uyni1oX3pp3GcWC6efH9YtI1ckhTMVehggiP247Vrs\"}"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8774c020-3a2d-45db-b2d7-0c019ea260fe","keyName":"e2e-rate-b-29b497","subscription":"e2e-rate-iso-b-29b497","tenant":"e2e-shared-b-1ea658","userId":"8774c020-3a2d-45db-b2d7-0c019ea260fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\",\"requestedSubscription\":\"e2e-rate-iso-b-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1ea658","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29b497","namespace":"ai-tenant-e2e-shared-b-1ea658","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-29b497"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8774c020-3a2d-45db-b2d7-0c019ea260fe","keyName":"e2e-rate-b-29b497","selected_subscription":"e2e-rate-iso-b-29b497","selected_subscription_key":"ai-tenant-e2e-shared-b-1ea658/e2e-rate-iso-b-29b497@ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1ea658","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29b497","namespace":"ai-tenant-e2e-shared-b-1ea658","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"} {"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"} {"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"} {"level":"info","ts":"2026-07-07T00:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"} {"level":"info","ts":"2026-07-07T00:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"}