--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-06T12:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"debug","ts":"2026-07-06T12:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da"} {"level":"debug","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"} {"level":"debug","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3"} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3"} {"level":"error","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3"} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:39:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:39:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3"} {"level":"info","ts":"2026-07-06T12:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5611eadd7cb33fe3b53daa42fc480ff75889276794b55cca944103d0c45ac34a"} {"level":"info","ts":"2026-07-06T12:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/754e6cd609415b193423d2811528a7e53e253b7f29f9d135b727d40f780939da"} {"level":"info","ts":"2026-07-06T12:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/893315eae2dcad2abbd46daf6232dced7c991552161c03f5134fa594575857c3"} {"level":"info","ts":"2026-07-06T12:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6671bf41378498fed7c9c7b9856abb6c53f2f47b21b08145994f59b500af1781"} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"info","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9"} {"level":"info","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9"} {"level":"info","ts":"2026-07-06T12:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"} {"level":"error","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"error","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48748","PortSpecifier":{"PortValue":48748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48748","PortSpecifier":{"PortValue":48748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341698,"nanos":719743247},"http":{"id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1e71d1a-9ffe-461d-8625-b7fd7c58d428","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341698,"nanos":781567614},"http":{"id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fc98b26-c2f7-4d73-87f1-746265d53c30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"649afa0b-5b1c-4cde-a630-923daab18bec","method":"GET","path":"/maas-api/v1/api-keys/499a46e9-5564-4816-b805-94d4034a3940","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341698,"nanos":867613784},"http":{"id":"649afa0b-5b1c-4cde-a630-923daab18bec","method":"GET","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/499a46e9-5564-4816-b805-94d4034a3940",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/499a46e9-5564-4816-b805-94d4034a3940",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649afa0b-5b1c-4cde-a630-923daab18bec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43760","PortSpecifier":{"PortValue":43760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","method":"GET","path":"/maas-api/v1/api-keys/3adbc6cd-cbd1-4d3b-a2b6-8dd77f09fc7b","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43760","PortSpecifier":{"PortValue":43760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341698,"nanos":905202986},"http":{"id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","method":"GET","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3adbc6cd-cbd1-4d3b-a2b6-8dd77f09fc7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3adbc6cd-cbd1-4d3b-a2b6-8dd77f09fc7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa98205d-18b9-4bc4-bcc5-ff2e130d0a38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51146","PortSpecifier":{"PortValue":51146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51146","PortSpecifier":{"PortValue":51146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341716,"nanos":339076657},"http":{"id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"731095ba-1344-4e0a-8f4c-10a12b12c10e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56954","PortSpecifier":{"PortValue":56954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56954","PortSpecifier":{"PortValue":56954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341716,"nanos":381148805},"http":{"id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e389ddb-ac29-440f-9df2-4ff35e2525c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51160","PortSpecifier":{"PortValue":51160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51160","PortSpecifier":{"PortValue":51160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341716,"nanos":427690697},"http":{"id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","method":"GET","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFbGltbxd98i9xZu_mretQtnv3SvwaseGSDExoGdSJcP57dGdZoTR24kjQc6"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFbGltbxd98i9xZu_mretQtnv3SvwaseGSDExoGdSJcP57dGdZoTR24kjQc6\"}"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"38bf370d-b728-4f6c-b9e9-683c88478d73","keyName":"e2e-auth-iso-a-a14644","subscription":"e2e-auth-iso-0a3fce","tenant":"e2e-shared-a-4e06f6","userId":"38bf370d-b728-4f6c-b9e9-683c88478d73","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0a3fce"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"185d9f99-e62d-4fe9-aac0-eed25290a8dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57272","PortSpecifier":{"PortValue":57272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57272","PortSpecifier":{"PortValue":57272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341734,"nanos":18605177},"http":{"id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"856c7c27-2c1f-4279-ad48-0e6e34085c5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48414","PortSpecifier":{"PortValue":48414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"104ee145-97b3-40b2-bc68-3aff03e7f449","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48414","PortSpecifier":{"PortValue":48414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341734,"nanos":57556600},"http":{"id":"104ee145-97b3-40b2-bc68-3aff03e7f449","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"104ee145-97b3-40b2-bc68-3aff03e7f449","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48424","PortSpecifier":{"PortValue":48424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48424","PortSpecifier":{"PortValue":48424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341734,"nanos":96380486},"http":{"id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","method":"GET","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jrahncdFeAXREzWX_5egscdgQzNiGzpFNV6uDT1Rb7nPmzd49O5NFZx5nL8J"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jrahncdFeAXREzWX_5egscdgQzNiGzpFNV6uDT1Rb7nPmzd49O5NFZx5nL8J\"}"} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T12:42:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ac5dff9-3c61-4a23-8af2-fe3c8fb264ad","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40582","PortSpecifier":{"PortValue":40582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40582","PortSpecifier":{"PortValue":40582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341751,"nanos":516440120},"http":{"id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ce65e9e-432b-487d-85cf-40f08941d6ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42554","PortSpecifier":{"PortValue":42554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42554","PortSpecifier":{"PortValue":42554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341751,"nanos":556657687},"http":{"id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b203e3b2-5d2a-4f32-80da-7e7d008614cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40588","PortSpecifier":{"PortValue":40588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"395068e9-5bbc-426b-b5fa-130c7be71eca","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40588","PortSpecifier":{"PortValue":40588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341751,"nanos":603469962},"http":{"id":"395068e9-5bbc-426b-b5fa-130c7be71eca","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"395068e9-5bbc-426b-b5fa-130c7be71eca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42566","PortSpecifier":{"PortValue":42566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee2e059f-a123-406e-9608-92407eaf7b6a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42566","PortSpecifier":{"PortValue":42566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341751,"nanos":640252885},"http":{"id":"ee2e059f-a123-406e-9608-92407eaf7b6a","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee2e059f-a123-406e-9608-92407eaf7b6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33656","PortSpecifier":{"PortValue":33656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33656","PortSpecifier":{"PortValue":33656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341766,"nanos":906710517},"http":{"id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4150709d-b3ed-40f8-8cc1-e9784fe8e64e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43746","PortSpecifier":{"PortValue":43746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43746","PortSpecifier":{"PortValue":43746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341766,"nanos":945066321},"http":{"id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a11621c-e5ca-413d-9fbf-ac7fddc4ab43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59007452-ff59-4281-bed3-bd1469e0552e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59007452-ff59-4281-bed3-bd1469e0552e","method":"GET","path":"/maas-api/v1/api-keys/2354403c-61f9-4d5c-8773-0ab42308e3f9","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59007452-ff59-4281-bed3-bd1469e0552e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341766,"nanos":986003277},"http":{"id":"59007452-ff59-4281-bed3-bd1469e0552e","method":"GET","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2354403c-61f9-4d5c-8773-0ab42308e3f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59007452-ff59-4281-bed3-bd1469e0552e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59007452-ff59-4281-bed3-bd1469e0552e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2354403c-61f9-4d5c-8773-0ab42308e3f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59007452-ff59-4281-bed3-bd1469e0552e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59007452-ff59-4281-bed3-bd1469e0552e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59007452-ff59-4281-bed3-bd1469e0552e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33668","PortSpecifier":{"PortValue":33668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","method":"GET","path":"/maas-api/v1/api-keys/2354403c-61f9-4d5c-8773-0ab42308e3f9","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33668","PortSpecifier":{"PortValue":33668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341767,"nanos":21866981},"http":{"id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","method":"GET","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2354403c-61f9-4d5c-8773-0ab42308e3f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2354403c-61f9-4d5c-8773-0ab42308e3f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:42:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0c39221-d97d-4c2e-bf0a-3cbda6335f6e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46244","PortSpecifier":{"PortValue":46244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46244","PortSpecifier":{"PortValue":46244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341782,"nanos":242860336},"http":{"id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1acbdcf-c1c7-4ede-83d1-a729211c5e91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54062","PortSpecifier":{"PortValue":54062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54062","PortSpecifier":{"PortValue":54062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341782,"nanos":279709812},"http":{"id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/auth-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aad5e08f-e41e-4d04-bd85-d0d2f778d886","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46260","PortSpecifier":{"PortValue":46260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46260","PortSpecifier":{"PortValue":46260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341782,"nanos":320063709},"http":{"id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D2qtK2bEx4dl7CVV_oUNvsgaoEuCWA1xHg1VS5qQo7zfB6NOPmvT6uhFDOeN"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D2qtK2bEx4dl7CVV_oUNvsgaoEuCWA1xHg1VS5qQo7zfB6NOPmvT6uhFDOeN\"}"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d637a3e-ce4d-4f50-a38d-d8c48a3fd59c","keyName":"e2e-auth-iso-a-dc68f4","subscription":"e2e-auth-iso-fa8084","tenant":"e2e-shared-a-4e06f6","userId":"6d637a3e-ce4d-4f50-a38d-d8c48a3fd59c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/auth-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fa8084"} {"level":"info","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15f10295-0aa4-4c97-9fb0-fabf47ebdc1d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c6a05474b2d821335ef558223f63ee6609f0db9991d8c835c15e961f7159683"} {"level":"info","ts":"2026-07-06T12:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/066ca7a7b1762ca339e4eb8577915af71ce75a6384f70bc2271cb8a109382aaf"} {"level":"info","ts":"2026-07-06T12:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c666b5c5dc9e3ad477ba2a822f16387cadbbfe24f5da428a0ffe68d8a86a6ce9"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98999403c0e4e59ef57a70e0dc0b77e96a8f2348d774fae42309b8c57decaeae"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2418b141c874c8c47b1e3e14ad24fdbca564d8a54b86a2fc5898fc46ed4c25c0"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b18fc0d524a9f817e6e5258dee760ed5f19e9651852e4f64499226d465fdfaa4"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5e4bd4be3c9813b11af16d84fa546879cfce5ae110354e9ecc6c0814cc6488a"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57280ec5ddaf245e5a3ff7d7bf3767720d4067d46d4bd17c988a44c2d1d1089e"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adcd4c533207b1c8f538e3a2edfc093b6544a149dfce655512f88446fedb025a"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47029c3ce4f8f4657d684164c55cdc10450137622a4d4f7fcaaf11c2cea148f4"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77fe76ce172bc34e19eac95934e213f667a356459d1931a360ef61d05cad4cc9"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e72b11f4054ab7c8fc7e20a58c1a1e856ddfcf6971d4b34c1c38873d0d16b49"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/694e2e775da211989442fb57353ef9b27bb4ca8b6f97dd2907953bfcf5a99b59"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20bc0b7a794c1cd895dc2fb7999a7638929d7bb5dc6733e80381a236ec0fbb71"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68c92d99be9a1464edfb86ef02e2611e574e0b22e87c5d64beb791b6bd40a6e5"} {"level":"info","ts":"2026-07-06T12:43:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5518e3833354416b465a50ac6401856163176f7c99ac73c18ffe47b43299cb3"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"error","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d"} {"level":"info","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d"} {"level":"debug","ts":"2026-07-06T12:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"} {"level":"error","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"debug","ts":"2026-07-06T12:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:43:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:43:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:43:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:43:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"debug","ts":"2026-07-06T12:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"} {"level":"debug","ts":"2026-07-06T12:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644"} {"level":"error","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"info","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"info","ts":"2026-07-06T12:44:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341851,"nanos":684400509},"http":{"id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/sub-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffaa32d9-0ed7-41d0-8d5c-8c0480935dff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33856","PortSpecifier":{"PortValue":33856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33856","PortSpecifier":{"PortValue":33856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341851,"nanos":726184472},"http":{"id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/sub-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8553a7a-3a57-460e-9ab7-d83436bd0741","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32882","PortSpecifier":{"PortValue":32882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f969179-dd0c-4c0e-9380-c795ed180882","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32882","PortSpecifier":{"PortValue":32882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341851,"nanos":769920856},"http":{"id":"3f969179-dd0c-4c0e-9380-c795ed180882","method":"GET","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WL2g8PmgVJ4JvWT1_C3C6hPKBD1bA2Lqvaj3Het8CTDkUmAxZf2LgfNRqZ2g"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WL2g8PmgVJ4JvWT1_C3C6hPKBD1bA2Lqvaj3Het8CTDkUmAxZf2LgfNRqZ2g\"}"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"86ee9a2d-cb89-47a5-b3c7-2c9a2ca98066","keyName":"e2e-sub-iso-6029dc","subscription":"e2e-a-only-fba2c2","tenant":"e2e-shared-a-4e06f6","userId":"86ee9a2d-cb89-47a5-b3c7-2c9a2ca98066","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/sub-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-fba2c2"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f969179-dd0c-4c0e-9380-c795ed180882","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341851,"nanos":808795314},"http":{"id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","method":"GET","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KgPbblPfxCOkrX8j_wyJA2S5Vhsj5A1G8rPQ1FgBxPXDkqRwedf4b5EPrFpp"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KgPbblPfxCOkrX8j_wyJA2S5Vhsj5A1G8rPQ1FgBxPXDkqRwedf4b5EPrFpp\"}"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"54f8de7e-e063-4b6f-a251-6d2642287da4","keyName":"e2e-sub-iso-5318c2","subscription":"e2e-b-only-fba2c2","tenant":"e2e-shared-b-b8c37f","userId":"54f8de7e-e063-4b6f-a251-6d2642287da4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/sub-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-fba2c2"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f159ba-80ba-4359-8128-38f1a1d4fa38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42340","PortSpecifier":{"PortValue":42340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e728304b-5550-488d-9df3-ead2ba3bf08f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42340","PortSpecifier":{"PortValue":42340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341862,"nanos":233071942},"http":{"id":"e728304b-5550-488d-9df3-ead2ba3bf08f","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/sub-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e728304b-5550-488d-9df3-ead2ba3bf08f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59250","PortSpecifier":{"PortValue":59250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59250","PortSpecifier":{"PortValue":59250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341862,"nanos":273242949},"http":{"id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/sub-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbcf25da-2557-479c-b2a1-fdf55cb766c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42344","PortSpecifier":{"PortValue":42344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42344","PortSpecifier":{"PortValue":42344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341862,"nanos":309659348},"http":{"id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lzUEl2x4T4c4x7nV_TCNc1qd8A0pfraVG0rj16LLU8OssAdoQM7ffc0Or042"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lzUEl2x4T4c4x7nV_TCNc1qd8A0pfraVG0rj16LLU8OssAdoQM7ffc0Or042\"}"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5f64d6c-15f0-4581-969d-f27d2de77e63","keyName":"e2e-sub-iso-95a44e","subscription":"e2e-shared-sub-88a3e3","tenant":"e2e-shared-a-4e06f6","userId":"c5f64d6c-15f0-4581-969d-f27d2de77e63","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/sub-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-88a3e3"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ec9ab6-a884-4386-a1c9-d278e920f2b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59252","PortSpecifier":{"PortValue":59252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59252","PortSpecifier":{"PortValue":59252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341862,"nanos":338720589},"http":{"id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YJovfyINMh90zBB_nmu3bsuukKDNx31AwsdmTasysotFajmbtjVyQloJKhQ"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YJovfyINMh90zBB_nmu3bsuukKDNx31AwsdmTasysotFajmbtjVyQloJKhQ\"}"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e916ed25-2ab6-46ab-8865-b4cd47ca7a8a","keyName":"e2e-sub-iso-028f72","subscription":"e2e-shared-sub-88a3e3","tenant":"e2e-shared-b-b8c37f","userId":"e916ed25-2ab6-46ab-8865-b4cd47ca7a8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/sub-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-88a3e3"} {"level":"info","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:44:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"443c8083-1b72-47b1-8c2e-9fe8ff14411c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27187e3ceddb1be981747e2e626289ee0dd8824047a95f8f8efee7ade1118fe6"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5945727f724d1f0a86fa0b622aaba57dfc9f428d6617f47b0109c5dffb66f1d0"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a3c2a1eaaa1891a89617d5929cbeb3c7a17251678b93c88af2a4bb4cdfe4b6b"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbbedc40b750d603dc93d8edc98babf92d06919d4ad62d16a0566553dc526185"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d9fd343202a7558dfcb66b820340a777d823d3b4788acd34264b6380d6baf2a"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c73096b5399f7124f67479f3b007c5a839836188dc16d70fefab00ebb47b30c9"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21e006960bc29e5e5eaf0c8a2f2f8109afca156880a67726087520b21bb32de"} {"level":"info","ts":"2026-07-06T12:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c7a93d76cde6ead79dac35211aea79a363e058c67c8a7264678fc0f56d46644"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0caf924b3b6efb08ed19ff342a874fd4387ad02227ba1b03227891bfa38e5a7d"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b003375188437ecf01fe0b43b157e1d0bb1425a0fd7e66e802c566a1b9dc4a"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91e594a337ba9ff5f7ffa575fe2d490931856c6b8fd80c9dd4166eefaa7be47a"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1b6edaae8fea714b04ad8bfb40d7fbd6a66b8fac55152c70d98a7de475d3f4d"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95c4446782b89b237ab8ed3616c70cd4a9225bd0958b0ab6c7497f6a5e2a8c8d"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d7726b70b9dd35a3f1324ce9d86c59d2ec5a977276f0a640929085d2b73961"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fd2f7039476665f967cb81e6109aeef999ebf6f8eada2bb68d90ca37e6a67ae"} {"level":"info","ts":"2026-07-06T12:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71a57addda07e13b20611d3a38f4620e03938789eba10141536c50bc7af01e33"} {"level":"debug","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c"} {"level":"debug","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c"} {"level":"debug","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"error","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661"} {"level":"debug","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"info","ts":"2026-07-06T12:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"debug","ts":"2026-07-06T12:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"debug","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37"} {"level":"debug","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"info","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"debug","ts":"2026-07-06T12:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"debug","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53774","PortSpecifier":{"PortValue":53774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"627d499d-c6cc-4390-93fe-cabf69fa637b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53774","PortSpecifier":{"PortValue":53774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341930,"nanos":564077234},"http":{"id":"627d499d-c6cc-4390-93fe-cabf69fa637b","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"627d499d-c6cc-4390-93fe-cabf69fa637b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46532","PortSpecifier":{"PortValue":46532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46532","PortSpecifier":{"PortValue":46532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341930,"nanos":602645856},"http":{"id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c69ec99-982b-4e98-a42c-24e11d9032b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53778","PortSpecifier":{"PortValue":53778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","method":"POST","path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53778","PortSpecifier":{"PortValue":53778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341930,"nanos":647020859},"http":{"id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UcJB1HIYUFNFXWVd_1CgXFgiI5FJoIJTcr0N0S9uThaGn7z2SDHFjZOgMrTj"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UcJB1HIYUFNFXWVd_1CgXFgiI5FJoIJTcr0N0S9uThaGn7z2SDHFjZOgMrTj\"}"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","keyName":"e2e-rate-a-97153c","subscription":"e2e-rate-iso-a-97153c","tenant":"e2e-shared-a-4e06f6","userId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\",\"requestedSubscription\":\"e2e-rate-iso-a-97153c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97153c","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-97153c"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","keyName":"e2e-rate-a-97153c","selected_subscription":"e2e-rate-iso-a-97153c","selected_subscription_key":"ai-tenant-e2e-shared-a-4e06f6/e2e-rate-iso-a-97153c@ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97153c","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfb5dcce-d020-4050-8295-55b8369e3bc6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53786","PortSpecifier":{"PortValue":53786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75479c4e-5b05-46ee-95ac-36b5de76579e","method":"POST","path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53786","PortSpecifier":{"PortValue":53786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341931,"nanos":705352658},"http":{"id":"75479c4e-5b05-46ee-95ac-36b5de76579e","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UcJB1HIYUFNFXWVd_1CgXFgiI5FJoIJTcr0N0S9uThaGn7z2SDHFjZOgMrTj"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UcJB1HIYUFNFXWVd_1CgXFgiI5FJoIJTcr0N0S9uThaGn7z2SDHFjZOgMrTj\"}"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","keyName":"e2e-rate-a-97153c","subscription":"e2e-rate-iso-a-97153c","tenant":"e2e-shared-a-4e06f6","userId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\",\"requestedSubscription\":\"e2e-rate-iso-a-97153c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97153c","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-97153c"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","keyName":"e2e-rate-a-97153c","selected_subscription":"e2e-rate-iso-a-97153c","selected_subscription_key":"ai-tenant-e2e-shared-a-4e06f6/e2e-rate-iso-a-97153c@ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97153c","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75479c4e-5b05-46ee-95ac-36b5de76579e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53792","PortSpecifier":{"PortValue":53792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"564a378c-a01d-48e2-a892-f61e58dff4bf","method":"POST","path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53792","PortSpecifier":{"PortValue":53792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341932,"nanos":737811993},"http":{"id":"564a378c-a01d-48e2-a892-f61e58dff4bf","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UcJB1HIYUFNFXWVd_1CgXFgiI5FJoIJTcr0N0S9uThaGn7z2SDHFjZOgMrTj"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UcJB1HIYUFNFXWVd_1CgXFgiI5FJoIJTcr0N0S9uThaGn7z2SDHFjZOgMrTj\"}"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","keyName":"e2e-rate-a-97153c","subscription":"e2e-rate-iso-a-97153c","tenant":"e2e-shared-a-4e06f6","userId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\",\"requestedSubscription\":\"e2e-rate-iso-a-97153c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97153c","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-97153c"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be1606f6-dfaf-40d9-849a-25dd9fd6f29f","keyName":"e2e-rate-a-97153c","selected_subscription":"e2e-rate-iso-a-97153c","selected_subscription_key":"ai-tenant-e2e-shared-a-4e06f6/e2e-rate-iso-a-97153c@ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97153c","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564a378c-a01d-48e2-a892-f61e58dff4bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36216","PortSpecifier":{"PortValue":36216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7d2b05f-7432-4d6f-848f-d6da41858326","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36216","PortSpecifier":{"PortValue":36216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341943,"nanos":606176808},"http":{"id":"e7d2b05f-7432-4d6f-848f-d6da41858326","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7d2b05f-7432-4d6f-848f-d6da41858326","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0be0698-9910-40aa-999b-abe4473936fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51758","PortSpecifier":{"PortValue":51758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0be0698-9910-40aa-999b-abe4473936fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0be0698-9910-40aa-999b-abe4473936fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51758","PortSpecifier":{"PortValue":51758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341943,"nanos":666406931},"http":{"id":"d0be0698-9910-40aa-999b-abe4473936fe","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0be0698-9910-40aa-999b-abe4473936fe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"]}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0be0698-9910-40aa-999b-abe4473936fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa058302720c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ed0adb1f-0410-4196-8f47-7afc9f15d5cc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"40f9feaa-e30b-4d0a-ad31-7a9cb792b542","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0be0698-9910-40aa-999b-abe4473936fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0be0698-9910-40aa-999b-abe4473936fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0be0698-9910-40aa-999b-abe4473936fe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36222","PortSpecifier":{"PortValue":36222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","method":"POST","path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36222","PortSpecifier":{"PortValue":36222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341943,"nanos":703427968},"http":{"id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-B5FSjBwMMdFZtNod_BzTC3n1iFYewfxkq94TXdXgDw5SUCGHBc0yAOk6cFPY"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-B5FSjBwMMdFZtNod_BzTC3n1iFYewfxkq94TXdXgDw5SUCGHBc0yAOk6cFPY\"}"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","keyName":"e2e-rate-a-892931","subscription":"e2e-rate-iso-a-892931","tenant":"e2e-shared-a-4e06f6","userId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\",\"requestedSubscription\":\"e2e-rate-iso-a-892931\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-892931","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-892931"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","keyName":"e2e-rate-a-892931","selected_subscription":"e2e-rate-iso-a-892931","selected_subscription_key":"ai-tenant-e2e-shared-a-4e06f6/e2e-rate-iso-a-892931@ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-892931","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8500503a-5ee1-46b5-b3c8-fb34702d8531","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36234","PortSpecifier":{"PortValue":36234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60127f3c-33d1-449d-aa55-336d0f915aa9","method":"POST","path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36234","PortSpecifier":{"PortValue":36234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341944,"nanos":743649128},"http":{"id":"60127f3c-33d1-449d-aa55-336d0f915aa9","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-B5FSjBwMMdFZtNod_BzTC3n1iFYewfxkq94TXdXgDw5SUCGHBc0yAOk6cFPY"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-B5FSjBwMMdFZtNod_BzTC3n1iFYewfxkq94TXdXgDw5SUCGHBc0yAOk6cFPY\"}"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","keyName":"e2e-rate-a-892931","subscription":"e2e-rate-iso-a-892931","tenant":"e2e-shared-a-4e06f6","userId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\",\"requestedSubscription\":\"e2e-rate-iso-a-892931\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-892931","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-892931"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","keyName":"e2e-rate-a-892931","selected_subscription":"e2e-rate-iso-a-892931","selected_subscription_key":"ai-tenant-e2e-shared-a-4e06f6/e2e-rate-iso-a-892931@ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-892931","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60127f3c-33d1-449d-aa55-336d0f915aa9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43472","PortSpecifier":{"PortValue":43472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db440eb9-6e91-49ab-8525-75e63ddac766","method":"POST","path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions","host":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43472","PortSpecifier":{"PortValue":43472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341945,"nanos":788571320},"http":{"id":"db440eb9-6e91-49ab-8525-75e63ddac766","method":"POST","headers":{":authority":"e2e-shared-a-4e06f6.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-B5FSjBwMMdFZtNod_BzTC3n1iFYewfxkq94TXdXgDw5SUCGHBc0yAOk6cFPY"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-B5FSjBwMMdFZtNod_BzTC3n1iFYewfxkq94TXdXgDw5SUCGHBc0yAOk6cFPY\"}"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","keyName":"e2e-rate-a-892931","subscription":"e2e-rate-iso-a-892931","tenant":"e2e-shared-a-4e06f6","userId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\",\"requestedSubscription\":\"e2e-rate-iso-a-892931\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e06f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-892931","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-892931"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5bbbf8dd-b34a-44cc-926c-89789c505a27","keyName":"e2e-rate-a-892931","selected_subscription":"e2e-rate-iso-a-892931","selected_subscription_key":"ai-tenant-e2e-shared-a-4e06f6/e2e-rate-iso-a-892931@ai-tenant-e2e-shared-a-4e06f6/rate-test-model-4e06f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e06f6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-892931","namespace":"ai-tenant-e2e-shared-a-4e06f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db440eb9-6e91-49ab-8525-75e63ddac766","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52406","PortSpecifier":{"PortValue":52406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","method":"POST","path":"/ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f/v1/completions","host":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52406","PortSpecifier":{"PortValue":52406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783341945,"nanos":827969155},"http":{"id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","method":"POST","headers":{":authority":"e2e-shared-b-b8c37f.apps.87c25fe2-5cba-4abe-ae73-fa058302720c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QfEV2PU8PV9n1DJe_BTs9h8PkLWYFQFZQli7h0WC8aRLcUXX8X3c3itih8i2"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QfEV2PU8PV9n1DJe_BTs9h8PkLWYFQFZQli7h0WC8aRLcUXX8X3c3itih8i2\"}"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7423c252-5b9a-4752-ac6f-cf23bad44a76","keyName":"e2e-rate-b-892931","subscription":"e2e-rate-iso-b-892931","tenant":"e2e-shared-b-b8c37f","userId":"7423c252-5b9a-4752-ac6f-cf23bad44a76","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f\",\"requestedSubscription\":\"e2e-rate-iso-b-892931\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8c37f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b8c37f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-892931","namespace":"ai-tenant-e2e-shared-b-b8c37f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-892931"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7423c252-5b9a-4752-ac6f-cf23bad44a76","keyName":"e2e-rate-b-892931","selected_subscription":"e2e-rate-iso-b-892931","selected_subscription_key":"ai-tenant-e2e-shared-b-b8c37f/e2e-rate-iso-b-892931@ai-tenant-e2e-shared-b-b8c37f/rate-test-model-b8c37f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b8c37f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-892931","namespace":"ai-tenant-e2e-shared-b-b8c37f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T12:45:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce60e09e-dff0-4b78-b8aa-b6fb8e335b51","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9edf8ace2f934b8567132fcb73c899d47f74e1d39ca708b276b14c8b14374f5c"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b9481b755dcbd64b0d430bb436267c6d1801b85d8ac87d8d87f7cd8bb8a3a1"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba8cd2e9f7044485f1a40c13f0c31087e87126a80f58ac13e46e89a72e2a47bd"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1d6aa92235b40061d980139be17654589b50624fb43a41f3eed8321c8763e37"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca6b89c8fbe5f82d4fc63f1c44912b3fee6cad317b649bbeb167021bf2ba840b"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e2dd96dba5e9f3b98df29e099d00be288a38a9ae5298f052b7429d9af6c0107"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2749ce12141a6a919d26c3612dcc10cb92acfb954381e8df59ac58ff786321c"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cef8966075c426feedb891ad00a975fe8ddecd01965ab1263272cafa71d6d547"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5689c7adb562534d6918a1540e7d923c7e59c840781db269c6b8a7a88fbe885"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d8d8faed3c174cd7fd660209e9044e71dea5f6da79f75f4f78595c4b49f1f10"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/316ea24c78e3fefd2e07edaf545854dab9e54395f0fd700a683edf8660037522"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b229455e6664d24b20b011674ba3639fb6ac950e0499aff8873590a6f5873865"} {"level":"info","ts":"2026-07-06T12:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8629df4b8806520c10b6d52dde6ab4f393d3fbe7400c3ac5a26dfe4a3cf4ea24"} {"level":"info","ts":"2026-07-06T12:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba41d56bdb627d31cf4678067320e1b087df67d68c449013f932a3f18265f4f"} {"level":"info","ts":"2026-07-06T12:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57d84a187e2a0cd93d991d74a41df4e0a8e4103c8a01ae120e4122e9c99a8661"} {"level":"info","ts":"2026-07-06T12:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/701febffec8d2f5505f6419b22355ff1b821bcdd19360a98f5362b9d683ec6bc"} {"level":"info","ts":"2026-07-06T12:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/852d0aacc238b02bef2eba5295d89a8dff427f268264779a647f9a87b7ea8aec"} {"level":"info","ts":"2026-07-06T12:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a04ab93b8d22d8b2fff79d018a195817013684ec2bcc9bba029e122a93e8be"} {"level":"info","ts":"2026-07-06T12:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/442ed58584bbfa9bb1ba7e632f37887806fad26a23056c9adf91fcf562e659f6"} {"level":"info","ts":"2026-07-06T12:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9b35733156abb8df34829d273f86b74bb42a0e55ff7268733f6637293240ed4"}