--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38100","PortSpecifier":{"PortValue":38100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38100","PortSpecifier":{"PortValue":38100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090829,"nanos":846036148},"http":{"id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/auth-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8dc1d9d-2ca4-481d-922b-57f09fc75a60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e359c716-4c06-4d43-9923-12163d272d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52944","PortSpecifier":{"PortValue":52944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e359c716-4c06-4d43-9923-12163d272d34","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e359c716-4c06-4d43-9923-12163d272d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52944","PortSpecifier":{"PortValue":52944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090829,"nanos":888017337},"http":{"id":"e359c716-4c06-4d43-9923-12163d272d34","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e359c716-4c06-4d43-9923-12163d272d34","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e359c716-4c06-4d43-9923-12163d272d34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/auth-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e359c716-4c06-4d43-9923-12163d272d34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e359c716-4c06-4d43-9923-12163d272d34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e359c716-4c06-4d43-9923-12163d272d34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"444679c1-de98-4801-b1df-c84f8028ea30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38114","PortSpecifier":{"PortValue":38114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"444679c1-de98-4801-b1df-c84f8028ea30","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"444679c1-de98-4801-b1df-c84f8028ea30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38114","PortSpecifier":{"PortValue":38114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090829,"nanos":924645766},"http":{"id":"444679c1-de98-4801-b1df-c84f8028ea30","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"444679c1-de98-4801-b1df-c84f8028ea30","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"444679c1-de98-4801-b1df-c84f8028ea30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/auth-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"444679c1-de98-4801-b1df-c84f8028ea30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"444679c1-de98-4801-b1df-c84f8028ea30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"444679c1-de98-4801-b1df-c84f8028ea30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52958","PortSpecifier":{"PortValue":52958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52958","PortSpecifier":{"PortValue":52958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090829,"nanos":959255871},"http":{"id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/auth-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"551a3fc1-ab39-4c9c-a19f-f14c915b40d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:33:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:33:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:33:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"info","ts":"2026-07-26T18:33:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:33:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:33:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"error","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd812697-010a-4a06-b412-5ca4c0720457","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42156","PortSpecifier":{"PortValue":42156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd812697-010a-4a06-b412-5ca4c0720457","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd812697-010a-4a06-b412-5ca4c0720457","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42156","PortSpecifier":{"PortValue":42156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090867,"nanos":798522892},"http":{"id":"bd812697-010a-4a06-b412-5ca4c0720457","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd812697-010a-4a06-b412-5ca4c0720457","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd812697-010a-4a06-b412-5ca4c0720457","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/auth-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd812697-010a-4a06-b412-5ca4c0720457","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd812697-010a-4a06-b412-5ca4c0720457","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd812697-010a-4a06-b412-5ca4c0720457","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090867,"nanos":835656420},"http":{"id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/auth-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e4ef8c2-e4ec-479b-b52b-cf36accc12f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51536","PortSpecifier":{"PortValue":51536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","method":"GET","path":"/maas-api/v1/api-keys/c8e87b5a-8b7e-439d-a763-22bf7a7d5e8a","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51536","PortSpecifier":{"PortValue":51536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090867,"nanos":874915276},"http":{"id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","method":"GET","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8e87b5a-8b7e-439d-a763-22bf7a7d5e8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8e87b5a-8b7e-439d-a763-22bf7a7d5e8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/auth-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8682311-1b76-4ea8-a155-5d3d8b06cf68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42162","PortSpecifier":{"PortValue":42162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","method":"GET","path":"/maas-api/v1/api-keys/c8e87b5a-8b7e-439d-a763-22bf7a7d5e8a","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42162","PortSpecifier":{"PortValue":42162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090867,"nanos":906367811},"http":{"id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","method":"GET","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8e87b5a-8b7e-439d-a763-22bf7a7d5e8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8e87b5a-8b7e-439d-a763-22bf7a7d5e8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/auth-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e1b5490-dde9-48ae-ac9a-5c6471b61733","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"error","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"error","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"debug","ts":"2026-07-26T18:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"debug","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"info","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34258","PortSpecifier":{"PortValue":34258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34258","PortSpecifier":{"PortValue":34258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090903,"nanos":576483700},"http":{"id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/auth-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061b7be6-0621-469d-8865-ac6fe3d23ae7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"967be646-f86a-4912-83b9-86b3e739705e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36280","PortSpecifier":{"PortValue":36280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"967be646-f86a-4912-83b9-86b3e739705e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"967be646-f86a-4912-83b9-86b3e739705e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36280","PortSpecifier":{"PortValue":36280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090903,"nanos":630413108},"http":{"id":"967be646-f86a-4912-83b9-86b3e739705e","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"967be646-f86a-4912-83b9-86b3e739705e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"967be646-f86a-4912-83b9-86b3e739705e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/auth-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"967be646-f86a-4912-83b9-86b3e739705e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"967be646-f86a-4912-83b9-86b3e739705e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"967be646-f86a-4912-83b9-86b3e739705e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34266","PortSpecifier":{"PortValue":34266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34266","PortSpecifier":{"PortValue":34266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785090903,"nanos":678153662},"http":{"id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OCABMvrAxOyWPN6A_aC4S2T2yKMonKFwOtWVPexJpsjyo1FL5kC7wdWgdKOQ"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OCABMvrAxOyWPN6A_aC4S2T2yKMonKFwOtWVPexJpsjyo1FL5kC7wdWgdKOQ\"}"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af01d325-fdca-4539-ade8-091b53c99367","keyName":"e2e-auth-iso-a-74906a","subscription":"e2e-auth-iso-56a495","tenant":"e2e-shared-a-57f93c","userId":"af01d325-fdca-4539-ade8-091b53c99367","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/auth-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-56a495"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6be51fc9-f10e-439a-9ff6-e4d50c134212","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e22e5faca7aef647fbfc3d298a10b25bf5cd0eafb4c3bd75837b78e4207c333"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c44abd78d2f1e68262027c3e889962b55489befd8de94fe01d6585741be6bb8"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ed95ec4417cc444c6274fce045eeed064a413bdc2c96fb72d8d127341f252c"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e30b24af72dd532e8b5b61bebdbbed424253a5db7cdf76b3cb2cd3c62b04bc"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38f0e8568886905b8dbf1fdd065435dc34a403beac2f897205dcc70388a82be1"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/971074b48db0d24f3be8bf1c62e1b149b62419ee45892f41723f8eaaed0bef1e"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f519415ef54f42df542eef2c53820ce5b09fcf6185365faaa5218512e3200d1"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7542e8599a910d1ddc60294a91bd1d2f224a096fe9ae70bd76c74ca18a90c1c8"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e0ac380ac6ee799162e3b10b2a53bbdd4911fa089331ec568a40b32def92775"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57d32f68819c80056d91dfe4016ff566b37a8897beecbdd1feca82fd4cf515c6"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0c9fb1433d2f282b270678c2674e0658544f343cdf838709a7828043d7d37dd"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec938f636d7036e979d07800bd2de9b0558358ff0f3c8127f706ada20f97a45a"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d19262eee7447731f88cb517f5f99cfcd1e0195cf0cf4aba6886303dc5021587"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/def3acd1e1d92f56fe89dbc87aa87736d6a20cb9274cc94cd66dd4d5f9588b59"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9d60db5577795cf398543c6311f14cd867efaf5051c028c279e84310af184ce"} {"level":"info","ts":"2026-07-26T18:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fe590a44a0d31c39e9bebf00a1aa60ff8640bf2e70f4043a5c240085cb189e4"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a"} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a"} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a"} {"level":"error","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b"} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457"} {"level":"info","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"} {"level":"info","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54286","PortSpecifier":{"PortValue":54286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8f3cf2d-2d60-4298-9097-23557172976b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54286","PortSpecifier":{"PortValue":54286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091028,"nanos":978876629},"http":{"id":"a8f3cf2d-2d60-4298-9097-23557172976b","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/sub-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8f3cf2d-2d60-4298-9097-23557172976b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60798","PortSpecifier":{"PortValue":60798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60798","PortSpecifier":{"PortValue":60798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091029,"nanos":21095355},"http":{"id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/sub-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd937cdf-8042-49ce-ad2d-6ba0c3d60bc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54298","PortSpecifier":{"PortValue":54298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54298","PortSpecifier":{"PortValue":54298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091029,"nanos":60187416},"http":{"id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","method":"GET","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pxoCzwf8WAjrCjbs_Iuf6BOdRfNaBfBY1KdpOQr8yjbXUzfwRWIpuxZp6D2c"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pxoCzwf8WAjrCjbs_Iuf6BOdRfNaBfBY1KdpOQr8yjbXUzfwRWIpuxZp6D2c\"}"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"985b8d47-7a1e-416c-9e95-4e609a608b8b","keyName":"e2e-sub-iso-0298c8","subscription":"e2e-a-only-38dc59","tenant":"e2e-shared-a-57f93c","userId":"985b8d47-7a1e-416c-9e95-4e609a608b8b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/sub-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-38dc59"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7217291a-eccb-42b4-94ea-2b39af2dfb6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60806","PortSpecifier":{"PortValue":60806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60806","PortSpecifier":{"PortValue":60806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091029,"nanos":102604122},"http":{"id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","method":"GET","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KA5pS72hMIG1c0Es_5kUcafxVQXy0QvjqSL0ZFOlw9JWeFA7zPDftMpZbI7X"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KA5pS72hMIG1c0Es_5kUcafxVQXy0QvjqSL0ZFOlw9JWeFA7zPDftMpZbI7X\"}"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5517071b-1f05-4714-8e8b-b89d9dafc575","keyName":"e2e-sub-iso-1fa48f","subscription":"e2e-b-only-38dc59","tenant":"e2e-shared-b-6aa894","userId":"5517071b-1f05-4714-8e8b-b89d9dafc575","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/sub-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-38dc59"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37023c98-52f1-4c3b-b43b-92e1de0a219f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04a9467d-1484-4b72-a6f0-32e5caf62431","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091051,"nanos":644895764},"http":{"id":"04a9467d-1484-4b72-a6f0-32e5caf62431","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/sub-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04a9467d-1484-4b72-a6f0-32e5caf62431","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46076","PortSpecifier":{"PortValue":46076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46076","PortSpecifier":{"PortValue":46076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091051,"nanos":688777694},"http":{"id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/sub-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0845dbcb-09dd-4b6a-84b4-2b2c0a6db117","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44404","PortSpecifier":{"PortValue":44404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44404","PortSpecifier":{"PortValue":44404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091051,"nanos":725060313},"http":{"id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WjktFZjFFLE0zNW1_i9tep0EVMEX0WBW5lJowgLAyLJ4HwnmKJ3vkOwijDZb"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WjktFZjFFLE0zNW1_i9tep0EVMEX0WBW5lJowgLAyLJ4HwnmKJ3vkOwijDZb\"}"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f702ff3-9db6-40f6-8c11-37e04d7af749","keyName":"e2e-sub-iso-e55c6f","subscription":"e2e-shared-sub-5f7a3f","tenant":"e2e-shared-a-57f93c","userId":"9f702ff3-9db6-40f6-8c11-37e04d7af749","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/sub-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5f7a3f"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f91d5d7-bce1-4343-8be5-095feb8a1f07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46092","PortSpecifier":{"PortValue":46092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46092","PortSpecifier":{"PortValue":46092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091051,"nanos":755958190},"http":{"id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-z1yvfwNXh6eBskne_KXtb6JelrUroDT25n1d2BuVZdh7GTjEqv4acZ6HaXOb"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-z1yvfwNXh6eBskne_KXtb6JelrUroDT25n1d2BuVZdh7GTjEqv4acZ6HaXOb\"}"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c7fa89-0c26-40b7-adc2-62231dab7d68","keyName":"e2e-sub-iso-ffa439","subscription":"e2e-shared-sub-5f7a3f","tenant":"e2e-shared-b-6aa894","userId":"43c7fa89-0c26-40b7-adc2-62231dab7d68","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/sub-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5f7a3f"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303e579d-1f65-4dc5-9e7e-6d1a9634f8b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e08755570a48f3bcb2d0e8b523b249c9658f25a36ca027b10c5dd94d24ee4457"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeeb4716f114c3030a26dffb0d9cde8fa5501758f2813f936761918aa38b8e60"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4ddeba97af97c25fdfe70e1fdb38319f631129b14081d9803d06b5ea7f1326b"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c22130c0df909a6440168aea343cd012da05524d20436e822e99c3923751f6d0"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dbdd54ad353b219396eca1036d0d80e8168435031ddad1eaca30fba2ec1caca"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab22ad00d7f83a43521defae3c9f7d15acc2d10ec6cf50f0bfdb5801f8f28e6"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/647ab8073ca17c6a1821702b143e29539fabdca469366ab7a9c07e30053c648a"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8be99a78c90de072e52ebd645f3f090660d897c5b8c25ec42d5b76041086c2b7"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c60b34bd07f94666a1830ab07d1b72e3167ad159ff80af851d89675fc3006085"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/447e3e6ba48d1c229b6e8c73a5432381597cc929ef04a751784245358ca40926"} {"level":"info","ts":"2026-07-26T18:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce504d388bfb833d67eee6e345bc3cd3bb528cb06bf2b3510f7342683968b4cb"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6313d1cfe01f5747be584218f8d01a3133389ae05043c229320b7b0abfd388a3"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/449cba822796f6bfa5c1b0000ca1552e134a623954eb9238f9f9fb22fa0644d8"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d436e64df8a30e5af01984a6086b25267c19a61616d4408bfd9d52f5359c2a27"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd7978c75ac8355ea4feccae5bff4f85c8fd434aea5544b27bea514c1e2a339"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3ff11529bcfb5d3e11fcf8edd73b452f63322a5dfaeb90062913d9acae8a33a"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"error","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139"} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139"} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0"} {"level":"error","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30"} {"level":"info","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"error","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51732","PortSpecifier":{"PortValue":51732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51732","PortSpecifier":{"PortValue":51732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091135,"nanos":864228562},"http":{"id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632d8480-0f3d-4336-994d-c41b3ef0abdd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c310c800-9722-4231-8481-2237ebb5e602","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56168","PortSpecifier":{"PortValue":56168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c310c800-9722-4231-8481-2237ebb5e602","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c310c800-9722-4231-8481-2237ebb5e602","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56168","PortSpecifier":{"PortValue":56168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091135,"nanos":905870444},"http":{"id":"c310c800-9722-4231-8481-2237ebb5e602","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c310c800-9722-4231-8481-2237ebb5e602","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c310c800-9722-4231-8481-2237ebb5e602","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c310c800-9722-4231-8481-2237ebb5e602","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c310c800-9722-4231-8481-2237ebb5e602","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c310c800-9722-4231-8481-2237ebb5e602","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46999bf3-4061-4f1a-889e-78f367db8138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51746","PortSpecifier":{"PortValue":51746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46999bf3-4061-4f1a-889e-78f367db8138","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46999bf3-4061-4f1a-889e-78f367db8138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51746","PortSpecifier":{"PortValue":51746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091135,"nanos":945656313},"http":{"id":"46999bf3-4061-4f1a-889e-78f367db8138","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CYZGiQehfniYwiB2_Wijv1Nee2xkFgCuP7AJMqyN88sB3uqOn6cjqeD6uhsN"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CYZGiQehfniYwiB2_Wijv1Nee2xkFgCuP7AJMqyN88sB3uqOn6cjqeD6uhsN\"}"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","keyName":"e2e-rate-a-c9f016","subscription":"e2e-rate-iso-a-c9f016","tenant":"e2e-shared-a-57f93c","userId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-c9f016\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c9f016","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46999bf3-4061-4f1a-889e-78f367db8138","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c9f016"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46999bf3-4061-4f1a-889e-78f367db8138","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","keyName":"e2e-rate-a-c9f016","selected_subscription":"e2e-rate-iso-a-c9f016","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-c9f016@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c9f016","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46999bf3-4061-4f1a-889e-78f367db8138","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46999bf3-4061-4f1a-889e-78f367db8138","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51750","PortSpecifier":{"PortValue":51750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51750","PortSpecifier":{"PortValue":51750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091137,"nanos":37660965},"http":{"id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CYZGiQehfniYwiB2_Wijv1Nee2xkFgCuP7AJMqyN88sB3uqOn6cjqeD6uhsN"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CYZGiQehfniYwiB2_Wijv1Nee2xkFgCuP7AJMqyN88sB3uqOn6cjqeD6uhsN\"}"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","keyName":"e2e-rate-a-c9f016","subscription":"e2e-rate-iso-a-c9f016","tenant":"e2e-shared-a-57f93c","userId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-c9f016\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c9f016","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c9f016"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","keyName":"e2e-rate-a-c9f016","selected_subscription":"e2e-rate-iso-a-c9f016","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-c9f016@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c9f016","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:38:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28e1951c-ec7f-4661-ae4d-f495b1e51f7d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51762","PortSpecifier":{"PortValue":51762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51762","PortSpecifier":{"PortValue":51762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091138,"nanos":82933527},"http":{"id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CYZGiQehfniYwiB2_Wijv1Nee2xkFgCuP7AJMqyN88sB3uqOn6cjqeD6uhsN"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CYZGiQehfniYwiB2_Wijv1Nee2xkFgCuP7AJMqyN88sB3uqOn6cjqeD6uhsN\"}"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","keyName":"e2e-rate-a-c9f016","subscription":"e2e-rate-iso-a-c9f016","tenant":"e2e-shared-a-57f93c","userId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-c9f016\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c9f016","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c9f016"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5416f391-ec92-42a9-8d50-3df11ffa40d5","keyName":"e2e-rate-a-c9f016","selected_subscription":"e2e-rate-iso-a-c9f016","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-c9f016@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c9f016","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:38:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41f9b728-2643-4b28-b6cc-cef14417d4d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41018","PortSpecifier":{"PortValue":41018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41018","PortSpecifier":{"PortValue":41018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091159,"nanos":314599766},"http":{"id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdd74b83-0bd5-42d9-b424-4d0bc2ceafb4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50764","PortSpecifier":{"PortValue":50764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50764","PortSpecifier":{"PortValue":50764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091159,"nanos":352764312},"http":{"id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0a8b207-699c-4c84-ab4e-088462ac22fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41032","PortSpecifier":{"PortValue":41032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4885ba54-e802-4435-a650-732a8a6adcc2","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41032","PortSpecifier":{"PortValue":41032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091159,"nanos":383477545},"http":{"id":"4885ba54-e802-4435-a650-732a8a6adcc2","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi\"}"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","subscription":"e2e-rate-iso-a-bdc20f","tenant":"e2e-shared-a-57f93c","userId":"d155e8df-cf84-4298-a700-c4e28906449f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","selected_subscription":"e2e-rate-iso-a-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-bdc20f@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4885ba54-e802-4435-a650-732a8a6adcc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41046","PortSpecifier":{"PortValue":41046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41046","PortSpecifier":{"PortValue":41046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091160,"nanos":426158663},"http":{"id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi\"}"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","subscription":"e2e-rate-iso-a-bdc20f","tenant":"e2e-shared-a-57f93c","userId":"d155e8df-cf84-4298-a700-c4e28906449f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","selected_subscription":"e2e-rate-iso-a-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-bdc20f@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad9e3226-21c5-4585-aa97-5767fa9d92a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41056","PortSpecifier":{"PortValue":41056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2bb9283-d009-457b-ac09-563b4c261f84","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41056","PortSpecifier":{"PortValue":41056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091161,"nanos":469786115},"http":{"id":"d2bb9283-d009-457b-ac09-563b4c261f84","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi\"}"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","subscription":"e2e-rate-iso-a-bdc20f","tenant":"e2e-shared-a-57f93c","userId":"d155e8df-cf84-4298-a700-c4e28906449f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","selected_subscription":"e2e-rate-iso-a-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-bdc20f@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2bb9283-d009-457b-ac09-563b4c261f84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41072","PortSpecifier":{"PortValue":41072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4268bdfe-5856-4b7c-b04b-100286616b74","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41072","PortSpecifier":{"PortValue":41072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091162,"nanos":511757143},"http":{"id":"4268bdfe-5856-4b7c-b04b-100286616b74","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi\"}"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","subscription":"e2e-rate-iso-a-bdc20f","tenant":"e2e-shared-a-57f93c","userId":"d155e8df-cf84-4298-a700-c4e28906449f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","selected_subscription":"e2e-rate-iso-a-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-bdc20f@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4268bdfe-5856-4b7c-b04b-100286616b74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35686","PortSpecifier":{"PortValue":35686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35686","PortSpecifier":{"PortValue":35686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091163,"nanos":548891822},"http":{"id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi\"}"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","subscription":"e2e-rate-iso-a-bdc20f","tenant":"e2e-shared-a-57f93c","userId":"d155e8df-cf84-4298-a700-c4e28906449f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","selected_subscription":"e2e-rate-iso-a-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-bdc20f@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9d93859-4a00-4e1f-96b8-ac36414f261f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35700","PortSpecifier":{"PortValue":35700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","method":"POST","path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions","host":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35700","PortSpecifier":{"PortValue":35700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091164,"nanos":583926754},"http":{"id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","method":"POST","headers":{":authority":"e2e-shared-a-57f93c.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3NFvmaEoR4ArU5Xh_R8NgfO71Qt9seQaqmjp2rei3uNODAq3Nh7gJ45R4kFi\"}"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","subscription":"e2e-rate-iso-a-bdc20f","tenant":"e2e-shared-a-57f93c","userId":"d155e8df-cf84-4298-a700-c4e28906449f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\",\"requestedSubscription\":\"e2e-rate-iso-a-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-57f93c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d155e8df-cf84-4298-a700-c4e28906449f","keyName":"e2e-rate-a-bdc20f","selected_subscription":"e2e-rate-iso-a-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-a-57f93c/e2e-rate-iso-a-bdc20f@ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-57f93c/models/facebook/opt-125m","name":"rate-test-model-57f93c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdc20f","namespace":"ai-tenant-e2e-shared-a-57f93c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-57f93c/rate-test-model-57f93c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8d2163a-1ba6-4f6e-a8e2-183b3741e6bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33772","PortSpecifier":{"PortValue":33772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","method":"POST","path":"/ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894/v1/completions","host":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33772","PortSpecifier":{"PortValue":33772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091164,"nanos":616681687},"http":{"id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","method":"POST","headers":{":authority":"e2e-shared-b-6aa894.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GhYs0EYaKwfjsaNq_PoVrmATDP5BFO8GfNAvAOHd9v8r9cWYEzK6VZK0IMzg"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GhYs0EYaKwfjsaNq_PoVrmATDP5BFO8GfNAvAOHd9v8r9cWYEzK6VZK0IMzg\"}"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e1903b15-b294-49b6-b7f3-fd8c5716762c","keyName":"e2e-rate-b-bdc20f","subscription":"e2e-rate-iso-b-bdc20f","tenant":"e2e-shared-b-6aa894","userId":"e1903b15-b294-49b6-b7f3-fd8c5716762c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894\",\"requestedSubscription\":\"e2e-rate-iso-b-bdc20f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6aa894.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m","name":"rate-test-model-6aa894","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bdc20f","namespace":"ai-tenant-e2e-shared-b-6aa894","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894"}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bdc20f"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e1903b15-b294-49b6-b7f3-fd8c5716762c","keyName":"e2e-rate-b-bdc20f","selected_subscription":"e2e-rate-iso-b-bdc20f","selected_subscription_key":"ai-tenant-e2e-shared-b-6aa894/e2e-rate-iso-b-bdc20f@ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-6aa894/models/facebook/opt-125m","name":"rate-test-model-6aa894","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bdc20f","namespace":"ai-tenant-e2e-shared-b-6aa894","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-6aa894/rate-test-model-6aa894"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:39:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8400ac0-c215-45f3-8018-ccaf4598df8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9a37aa8af360e092ff113f9538c9bde020e7c6fa1057ea94a16d568611f2b57"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45ff5e54c8aba369916ab477959b7abf1476675507a3114dcb8039f7a7c11402"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad7793a920ff79c61e5aa310c2634ddb7f959869bb09ec856b4e3fa10e795857"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e01e06c7afcda42d7ddab55f4514fe4f381a8124aac8c24798c23792ba2b619"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee994212f5c26301191e2f3c836fafc2c92287fa959496f093fcf834acd9da4d"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce3a15981975d0654065eb43c5000225b0f38b8fecaeef571f8792de3458ed60"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081712b6c2f5f86cfc7e34b86e6ff2396d196be1a6d661ca6a303a52341630dc"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/010e54b8689a7e3c82a2468fc31089e2b29e4d5ae1c68185ba05d2e9c86e7ced"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1bb999305df0aa0ed8715ed81267de17ef20fa7ffcc926351cce597343835e0"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f343a854de155638e27645d9eb59da92ceeb2401c9d19803cab176e7bfee576"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb371d6d760c5e3e64da54f69c15d77ff8067e0cfb7c0703ae3b969643f1523e"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d32a1644f5702bc49a68c009d4f6ce5cda6a271315e08d0a1ad61c82c0de4817"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de5736d28f23a6e0da355b5b4cd3de2c8c16112f8cf3df16ff491f5e155f77f2"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c36dca50d2930943ee2b3931ccd07aa6ea3cef55c61c195f9a8570fb026df2"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc9a6f721dee35ad3d1ce0871da5c6c77c2af43e1009f05436e12d49aab833d"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f7404b28a11d76ebd909e085e8668a7729daa7248a2aaa7aff19e3a78ab7912"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/196148f283e3716a10f94723ca3951cb47319adfda7e303b76a9802d68d51b6e"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24eb2767c101357d5360b4c512b71f6cf913e28108ea9abe473597af4ef3f9ea"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bef10e26974a06b25cca599c249ed8dd474982ff56563f2cb3518bb7fa1f139"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bc679e3db271c7bb9f193e3cc9bbcb55afbe3cb44938958b4cdb9fb8aa2ba30"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b0c97949e65b24b1be49e5268df22c60600543782c342e31cdabaa6cfefa024"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1655878ee9f403d5bb887d60ec467c5669f3d1582c04d2aed5aaa991264c4bca"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc53a56de293a874ea86f05c2a6bb1a2d4306c2c260905db984fcbf5559f487"} {"level":"info","ts":"2026-07-26T18:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf7e1b0f4ea7b8845ba7c8e6b65fbfba6a6c44f3a04db0f3a75dc4bd262087"} {"level":"info","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48182","PortSpecifier":{"PortValue":48182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fd8f336-b370-442a-b128-75eb48ba4230","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48182","PortSpecifier":{"PortValue":48182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091228,"nanos":298423901},"http":{"id":"3fd8f336-b370-442a-b128-75eb48ba4230","method":"POST","headers":{":authority":"maas.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd8f336-b370-442a-b128-75eb48ba4230","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48184","PortSpecifier":{"PortValue":48184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48184","PortSpecifier":{"PortValue":48184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091228,"nanos":356183448},"http":{"id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","method":"POST","headers":{":authority":"maas.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ccAdLnK4aI8iEfK7_wv8hNbjzV24sTBz0B3kZEuExSd4TCqcTKM5T1W4POym"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ccAdLnK4aI8iEfK7_wv8hNbjzV24sTBz0B3kZEuExSd4TCqcTKM5T1W4POym\"}"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d98e8fe9-cbe7-4a38-8626-a416f4ce2b4c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"d98e8fe9-cbe7-4a38-8626-a416f4ce2b4c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d98e8fe9-cbe7-4a38-8626-a416f4ce2b4c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"008a4f62-5fb5-4fe6-a1a6-d123bf6def3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5"} {"level":"error","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8"} {"level":"error","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"} {"level":"error","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"info","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44800","PortSpecifier":{"PortValue":44800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-76b936.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44800","PortSpecifier":{"PortValue":44800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091283,"nanos":444534016},"http":{"id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","method":"POST","headers":{":authority":"e2e-ipp-a-76b936.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"]}} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7205effec17d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=49434ce8-ea57-4053-ad8e-00a9de77732c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9e635fe9-7bcf-41a9-a1b9-0c8948e2168d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-76b936.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-76b936/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:41:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80999fab-f5e0-4fa6-bf8c-301c43c2b255","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44802","PortSpecifier":{"PortValue":44802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","method":"POST","path":"/ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936/v1/chat/completions","host":"e2e-ipp-a-76b936.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44802","PortSpecifier":{"PortValue":44802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785091285,"nanos":513439857},"http":{"id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","method":"POST","headers":{":authority":"e2e-ipp-a-76b936.apps.833a4056-319b-4b10-9871-7205effec17d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BGRmgjlHAzIVWm7F_jtG9C4eTRLBZO3gKECuMqVkWfd0rEcHi06pziLKkTDz"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-76b936.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BGRmgjlHAzIVWm7F_jtG9C4eTRLBZO3gKECuMqVkWfd0rEcHi06pziLKkTDz\"}"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-76b936.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d5b4df-fba4-40dc-a117-1b1299ff866a","keyName":"e2e-ipp-76b936","subscription":"ipp-route-76b936-sub","tenant":"e2e-ipp-a-76b936","userId":"01d5b4df-fba4-40dc-a117-1b1299ff866a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-76b936.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936\",\"requestedSubscription\":\"ipp-route-76b936-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-76b936.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-76b936/models/facebook/opt-125m","name":"ipp-route-76b936","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-76b936-sub","namespace":"ai-tenant-e2e-ipp-a-76b936","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936"}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-76b936/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-76b936-sub"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d5b4df-fba4-40dc-a117-1b1299ff866a","keyName":"e2e-ipp-76b936","selected_subscription":"ipp-route-76b936-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936-sub@ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-76b936/models/facebook/opt-125m","name":"ipp-route-76b936","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-76b936-sub","namespace":"ai-tenant-e2e-ipp-a-76b936","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-76b936/ipp-route-76b936"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:41:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"596d3a0a-0405-4d6c-adb8-7334a402de7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9a19c7bc506fb9600520be450d2fab37b1f923caa3b92234608ac3808d56cb6"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb844e205f776579265b90c81e98864352c3de591fd84737600c3ad33998e9f3"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68b3a04c0ebab4f78bc11a909b2e92f460606e724df1a176b249c6870b8012d2"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3788cd60b62fa1f0ed503390646cedb8149f92bc8a8b36dd8a411e6fed7facdc"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd4f039c98ba3f2aa697976e3088ab5f44284801b64a7036ccf676ced29239bb"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/067780cbae0c8a59883a32e52ecebb8d9ec75c3e7499edd717bae10d1cd914d1"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2f0f106a4ced0c56a30d18b53681b0fc58f1fc709052656766a88e00602c603"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7efdbf7d4676ff67db310bb1587a8f63f07cc411587f1bbce589df260dba4fa0"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d0fd4bfe818b3fd8c7cbccbecd067ef9efa506c3f2071aee1050057c8d443a8"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f0934d79ea05fb5fd0a728fefdf16c9c15d0b7350fd9f6ed1245eb8d490779e"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b560cb54d4dab9c5fbd1f8a3ef74f35aecd1e7156c451d9341e55c24db820c5"} {"level":"info","ts":"2026-07-26T18:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6980e25b802eb61fd9f80c8f524a9b0ed860ddba22b1b665b9c8cc4521c542e7"}