--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:28:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60972","PortSpecifier":{"PortValue":60972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60972","PortSpecifier":{"PortValue":60972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341741,"nanos":114181396},"http":{"id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b1e137d-cbdf-4f75-960b-5e705a6e78c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42256","PortSpecifier":{"PortValue":42256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f3adb64-5624-45cb-9655-3fafdc87faba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42256","PortSpecifier":{"PortValue":42256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341741,"nanos":151478545},"http":{"id":"3f3adb64-5624-45cb-9655-3fafdc87faba","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/auth-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f3adb64-5624-45cb-9655-3fafdc87faba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42266","PortSpecifier":{"PortValue":42266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42266","PortSpecifier":{"PortValue":42266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341741,"nanos":187919886},"http":{"id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","method":"GET","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wSJf0FxSJgCjvlyV_H5EAPanU8cBK3ntbmnewlSbkyGpnw2Qf33NxtVqxBxx"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wSJf0FxSJgCjvlyV_H5EAPanU8cBK3ntbmnewlSbkyGpnw2Qf33NxtVqxBxx\"}"} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-18T02:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba37cf76-1b58-4a90-a120-8ac80a2a2ddc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"error","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"error","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"error","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"error","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"error","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39528","PortSpecifier":{"PortValue":39528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39528","PortSpecifier":{"PortValue":39528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341758,"nanos":171803414},"http":{"id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12eb95d-f626-4c8b-9077-0bdc789e3154","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57212","PortSpecifier":{"PortValue":57212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d875df17-48e3-484a-b8bc-591583c8e0ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57212","PortSpecifier":{"PortValue":57212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341758,"nanos":203870474},"http":{"id":"d875df17-48e3-484a-b8bc-591583c8e0ad","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/auth-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d875df17-48e3-484a-b8bc-591583c8e0ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39542","PortSpecifier":{"PortValue":39542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3a0528c-e090-45d4-9726-3bd30db56a79","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39542","PortSpecifier":{"PortValue":39542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341758,"nanos":235770151},"http":{"id":"c3a0528c-e090-45d4-9726-3bd30db56a79","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3a0528c-e090-45d4-9726-3bd30db56a79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d3f868-6254-461f-909e-66751d8d4912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57224","PortSpecifier":{"PortValue":57224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1d3f868-6254-461f-909e-66751d8d4912","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d3f868-6254-461f-909e-66751d8d4912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57224","PortSpecifier":{"PortValue":57224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341758,"nanos":270152590},"http":{"id":"b1d3f868-6254-461f-909e-66751d8d4912","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1d3f868-6254-461f-909e-66751d8d4912","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1d3f868-6254-461f-909e-66751d8d4912","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/auth-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d3f868-6254-461f-909e-66751d8d4912","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d3f868-6254-461f-909e-66751d8d4912","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d3f868-6254-461f-909e-66751d8d4912","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"error","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59546","PortSpecifier":{"PortValue":59546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59546","PortSpecifier":{"PortValue":59546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341775,"nanos":267103035},"http":{"id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87cf0b1a-cb94-426e-a07e-7893f0c8ef5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50294","PortSpecifier":{"PortValue":50294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfde74c2-92d1-4528-bed3-d322398ca491","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50294","PortSpecifier":{"PortValue":50294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341775,"nanos":300439279},"http":{"id":"bfde74c2-92d1-4528-bed3-d322398ca491","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/auth-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfde74c2-92d1-4528-bed3-d322398ca491","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","method":"GET","path":"/maas-api/v1/api-keys/bca0ada0-fa8c-4ce9-ab2d-0c5280b2e3cb","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341775,"nanos":335421155},"http":{"id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","method":"GET","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bca0ada0-fa8c-4ce9-ab2d-0c5280b2e3cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bca0ada0-fa8c-4ce9-ab2d-0c5280b2e3cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/auth-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e954fa97-2bed-46aa-8859-37be1b8ac9df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59554","PortSpecifier":{"PortValue":59554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","method":"GET","path":"/maas-api/v1/api-keys/bca0ada0-fa8c-4ce9-ab2d-0c5280b2e3cb","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59554","PortSpecifier":{"PortValue":59554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341775,"nanos":366748812},"http":{"id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","method":"GET","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bca0ada0-fa8c-4ce9-ab2d-0c5280b2e3cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bca0ada0-fa8c-4ce9-ab2d-0c5280b2e3cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a275b18d-48f4-4874-bd49-a6cae784d7ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"error","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60a34f7-0233-417c-a286-41ac35f88438","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60308","PortSpecifier":{"PortValue":60308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b60a34f7-0233-417c-a286-41ac35f88438","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60a34f7-0233-417c-a286-41ac35f88438","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60308","PortSpecifier":{"PortValue":60308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341794,"nanos":544436494},"http":{"id":"b60a34f7-0233-417c-a286-41ac35f88438","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b60a34f7-0233-417c-a286-41ac35f88438","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b60a34f7-0233-417c-a286-41ac35f88438","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60a34f7-0233-417c-a286-41ac35f88438","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60a34f7-0233-417c-a286-41ac35f88438","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60a34f7-0233-417c-a286-41ac35f88438","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b65811d-a751-4078-b697-09c616eff40d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35938","PortSpecifier":{"PortValue":35938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b65811d-a751-4078-b697-09c616eff40d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b65811d-a751-4078-b697-09c616eff40d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35938","PortSpecifier":{"PortValue":35938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341794,"nanos":581054224},"http":{"id":"4b65811d-a751-4078-b697-09c616eff40d","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b65811d-a751-4078-b697-09c616eff40d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b65811d-a751-4078-b697-09c616eff40d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/auth-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b65811d-a751-4078-b697-09c616eff40d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b65811d-a751-4078-b697-09c616eff40d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b65811d-a751-4078-b697-09c616eff40d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341794,"nanos":615400523},"http":{"id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X5CgRpnHxlghvXbd_Q3EWRTNixdBZkZMfffdHFx0c1DKbEipyMPOe8B3sl2S"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X5CgRpnHxlghvXbd_Q3EWRTNixdBZkZMfffdHFx0c1DKbEipyMPOe8B3sl2S\"}"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"440ecadf-a748-45ba-94e5-0450431a2c38","keyName":"e2e-auth-iso-a-3a86fb","subscription":"e2e-auth-iso-a44ffa","tenant":"e2e-shared-a-d05e31","userId":"440ecadf-a748-45ba-94e5-0450431a2c38","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/auth-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a44ffa"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:29:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a24898ad-cbbb-4169-9c8f-c67d0114bc8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:29:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbce5f2a93ca0840ba4ebb331223b027ab8a557c7b4a100e43d19d7cfd83d9bd"} {"level":"info","ts":"2026-07-18T02:29:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb2939282de8b1f5e64ae4a723df0e80e644ced2491cc6edbac7cc570757e701"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89d6c23def12ee0051b7c5bd5a32c584c751a369aed88e967a887ef1d257727"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfb6063fc143f2a7f55848d7d6d30942886547a437bb03405f1af58c0bf9858e"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed224ac7d2a84e40609548e3e35b6f0a8278e193afd5c13265308a095e3d5ae"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5284435c41d03df513ccce32026deb0a198c920c1a8aa59865d90e31e5e5fee0"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b7763c0279ada19ef44fd056134a2b6df76b87a78c9d7b0280d573420c69b92"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3491731a6e067df6876492ea822440cca6688b543f23168e9798749098926732"} {"level":"info","ts":"2026-07-18T02:29:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c99c6bc2c132a8c5f79efc3ad574ccfb585a1347b8c734538328f00dfd77766"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d27fc23d232044fcfe9612a10edd37ec3eba8895234174b4566420d250449434"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/546921baef197463bc80ae6629816e27d495599950dc7961cb50210add2ad39c"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288f7c3e8ec2afc622c44c6774caa8eb831dbd21e33ea741247751e530636de4"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f088cb99a35d9fb6a77194468bbdc72c1d289bde9c4c011816cccfab1cefb228"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89d55333fe34ca5e1206b454a141e3d06a1a92dc7b4a6f6c61b6e496538c33fa"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5287135000ac49033a872c03dbbbe7fa7a1bf6073d7e43b061ae81f16d8e1236"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af56ca6060489f59c727cb7cf5a1eb7eca5f4ed212dc96bf6dfd0d801ec9e96c"} {"level":"info","ts":"2026-07-18T02:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"info","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"error","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"error","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"error","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56884","PortSpecifier":{"PortValue":56884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af81de9e-ba32-4896-a2f2-dd513f520cea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56884","PortSpecifier":{"PortValue":56884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341855,"nanos":48978250},"http":{"id":"af81de9e-ba32-4896-a2f2-dd513f520cea","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/sub-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af81de9e-ba32-4896-a2f2-dd513f520cea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48530","PortSpecifier":{"PortValue":48530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48530","PortSpecifier":{"PortValue":48530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341855,"nanos":86239671},"http":{"id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/sub-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffb6fb21-408e-4f2d-8ded-ee53067eec72","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56900","PortSpecifier":{"PortValue":56900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56900","PortSpecifier":{"PortValue":56900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341855,"nanos":126177410},"http":{"id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","method":"GET","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-67i7EoEKG3de2Ud_j7m7MRE77RoQKF3lfN3V9aEbEqX8Q9FDDO7AF6pPiJa"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-67i7EoEKG3de2Ud_j7m7MRE77RoQKF3lfN3V9aEbEqX8Q9FDDO7AF6pPiJa\"}"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6785754-3649-4016-b36c-0ef0ddba4551","keyName":"e2e-sub-iso-052ccd","subscription":"e2e-a-only-396cd5","tenant":"e2e-shared-a-d05e31","userId":"b6785754-3649-4016-b36c-0ef0ddba4551","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/sub-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-396cd5"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b3efec-a8ce-4294-8b1e-627b51475ae6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48540","PortSpecifier":{"PortValue":48540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3602685-4514-44a3-9611-efdd4cc2f863","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48540","PortSpecifier":{"PortValue":48540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341855,"nanos":164575952},"http":{"id":"a3602685-4514-44a3-9611-efdd4cc2f863","method":"GET","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17iERsxm8josruZWU_3R7cVPlJ9gTH6EvTc5TkNHXcP4PRfBrR0iBbl7oTjbF"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17iERsxm8josruZWU_3R7cVPlJ9gTH6EvTc5TkNHXcP4PRfBrR0iBbl7oTjbF\"}"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18854f45-3bb7-40b4-826e-720ecb820ebf","keyName":"e2e-sub-iso-fd383a","subscription":"e2e-b-only-396cd5","tenant":"e2e-shared-b-f0c43e","userId":"18854f45-3bb7-40b4-826e-720ecb820ebf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/sub-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-396cd5"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3602685-4514-44a3-9611-efdd4cc2f863","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"error","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"error","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"info","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"debug","ts":"2026-07-18T02:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:31:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:31:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59150","PortSpecifier":{"PortValue":59150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e477a106-79c4-4cbf-92af-e2dd553345d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59150","PortSpecifier":{"PortValue":59150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341871,"nanos":415699067},"http":{"id":"e477a106-79c4-4cbf-92af-e2dd553345d0","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/sub-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e477a106-79c4-4cbf-92af-e2dd553345d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34958","PortSpecifier":{"PortValue":34958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceb225ed-de81-4235-83a1-6828864ec6a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34958","PortSpecifier":{"PortValue":34958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341871,"nanos":453875951},"http":{"id":"ceb225ed-de81-4235-83a1-6828864ec6a0","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/sub-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceb225ed-de81-4235-83a1-6828864ec6a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59156","PortSpecifier":{"PortValue":59156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59156","PortSpecifier":{"PortValue":59156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341871,"nanos":488533559},"http":{"id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IlTXdCMNC63afY5n_ojz8QnlDaFw6lwYpVVP4s3aowGDJmiJbsBeKziba4PQ"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IlTXdCMNC63afY5n_ojz8QnlDaFw6lwYpVVP4s3aowGDJmiJbsBeKziba4PQ\"}"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4907e0b-2fd9-496f-a1b3-9d391cc29962","keyName":"e2e-sub-iso-053680","subscription":"e2e-shared-sub-c7640d","tenant":"e2e-shared-a-d05e31","userId":"e4907e0b-2fd9-496f-a1b3-9d391cc29962","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/sub-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c7640d"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b657fa40-8def-4423-a5b9-d95d58a5e9ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34972","PortSpecifier":{"PortValue":34972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34972","PortSpecifier":{"PortValue":34972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341871,"nanos":516370681},"http":{"id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hLRB21nniAepJP1U_Lf4ruAFoxYBlC1fw0AQazFGFdqhMB4twWn7NaqlsS38"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hLRB21nniAepJP1U_Lf4ruAFoxYBlC1fw0AQazFGFdqhMB4twWn7NaqlsS38\"}"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00fd282d-f314-4046-964b-87fff17ec579","keyName":"e2e-sub-iso-313094","subscription":"e2e-shared-sub-c7640d","tenant":"e2e-shared-b-f0c43e","userId":"00fd282d-f314-4046-964b-87fff17ec579","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/sub-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c7640d"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e46cb1f6-c897-42c2-91d2-c50591e5be91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b787c5d86344c8bcb673535f5d23b299a9c562de66485b90cc9c5beb30d4732"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e838ed535f134d28aef812b90f28f731875a53d7d07c13938092ed3b66f338ce"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39eb3be02bc8b5909c170735d21435d2c7d8966626614f449728226deb95b35c"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d19ed218d2d6a86dd7ae1ae150ad5a3f34fe0ba39dfe7e0c8c1051fe07e5285"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a386a8515123f7edf8ed0d4cdfdfb06c330f9f3ae73d394642918c74e298625"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/969da655701c9d46d0ed519c759ea656d58d8d0431fc256bf181d274b0c8001c"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fc48b67f2f63f771535039bee64545607e858510bb6968e9ffc2f421453d901"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a3466e3da39470b2f4b26eb87b589f4fb84485eb95afb19b714868b039eda99"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5b6251920849015f877f900e4ea05fa1944d8e085f86b7d2ffe6484efca65f0"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aede2b36a5ed45de33f652803d3a722fae50e831f29bece12b73a1a2be9c5aae"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/237efb35106020ff352718e242d3991d74a04a3f2b165df5daf2a1df504b8994"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7e32f1c13ce282a25f3790154870ad430fc99eed0d61f4251dff8cf72bf9b3a"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b62eeab4a45be49fa18e41f7bb470bf6b250962a81a09359861874a8c2ccaed5"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dd71ef9eed6f571d711cc5c6b51aea2962473e475dbe519ccf59ac1d8e71f42"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d0510ee1ed91d6445a3cd0be16b29abee77c7658e7f6635aa1325fa0b322cca"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e77143b538aea22a80c44198c97669fc93b8c495292ebc3eab3530ff94380e28"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627"} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"error","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d"} {"level":"info","ts":"2026-07-18T02:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda"} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90"} {"level":"info","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92952a91-a098-48c1-82aa-eb929d999848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52016","PortSpecifier":{"PortValue":52016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92952a91-a098-48c1-82aa-eb929d999848","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92952a91-a098-48c1-82aa-eb929d999848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52016","PortSpecifier":{"PortValue":52016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341962,"nanos":660578255},"http":{"id":"92952a91-a098-48c1-82aa-eb929d999848","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92952a91-a098-48c1-82aa-eb929d999848","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92952a91-a098-48c1-82aa-eb929d999848","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92952a91-a098-48c1-82aa-eb929d999848","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92952a91-a098-48c1-82aa-eb929d999848","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92952a91-a098-48c1-82aa-eb929d999848","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38556","PortSpecifier":{"PortValue":38556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dc26cbf-0e24-423a-aeae-cca63be36941","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38556","PortSpecifier":{"PortValue":38556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341962,"nanos":707438389},"http":{"id":"8dc26cbf-0e24-423a-aeae-cca63be36941","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dc26cbf-0e24-423a-aeae-cca63be36941","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52020","PortSpecifier":{"PortValue":52020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","method":"POST","path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52020","PortSpecifier":{"PortValue":52020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341962,"nanos":748604562},"http":{"id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KtYHTKkVizvWBGVE_UDmMRr69DcwnxAwhpYorEiEXWHRw78jnB01mTQxokLs"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KtYHTKkVizvWBGVE_UDmMRr69DcwnxAwhpYorEiEXWHRw78jnB01mTQxokLs\"}"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","keyName":"e2e-rate-a-eea4df","subscription":"e2e-rate-iso-a-eea4df","tenant":"e2e-shared-a-d05e31","userId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\",\"requestedSubscription\":\"e2e-rate-iso-a-eea4df\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eea4df","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eea4df"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","keyName":"e2e-rate-a-eea4df","selected_subscription":"e2e-rate-iso-a-eea4df","selected_subscription_key":"ai-tenant-e2e-shared-a-d05e31/e2e-rate-iso-a-eea4df@ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eea4df","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a2e4eb-84d8-4b63-a363-646384e5dc05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52028","PortSpecifier":{"PortValue":52028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","method":"POST","path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52028","PortSpecifier":{"PortValue":52028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341963,"nanos":813883071},"http":{"id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KtYHTKkVizvWBGVE_UDmMRr69DcwnxAwhpYorEiEXWHRw78jnB01mTQxokLs"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KtYHTKkVizvWBGVE_UDmMRr69DcwnxAwhpYorEiEXWHRw78jnB01mTQxokLs\"}"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","keyName":"e2e-rate-a-eea4df","subscription":"e2e-rate-iso-a-eea4df","tenant":"e2e-shared-a-d05e31","userId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\",\"requestedSubscription\":\"e2e-rate-iso-a-eea4df\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eea4df","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eea4df"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","keyName":"e2e-rate-a-eea4df","selected_subscription":"e2e-rate-iso-a-eea4df","selected_subscription_key":"ai-tenant-e2e-shared-a-d05e31/e2e-rate-iso-a-eea4df@ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eea4df","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9edc9085-ecae-4d64-8f8a-fe50cbcb7248","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52040","PortSpecifier":{"PortValue":52040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","method":"POST","path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52040","PortSpecifier":{"PortValue":52040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341964,"nanos":851039106},"http":{"id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KtYHTKkVizvWBGVE_UDmMRr69DcwnxAwhpYorEiEXWHRw78jnB01mTQxokLs"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KtYHTKkVizvWBGVE_UDmMRr69DcwnxAwhpYorEiEXWHRw78jnB01mTQxokLs\"}"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","keyName":"e2e-rate-a-eea4df","subscription":"e2e-rate-iso-a-eea4df","tenant":"e2e-shared-a-d05e31","userId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\",\"requestedSubscription\":\"e2e-rate-iso-a-eea4df\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eea4df","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eea4df"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b60d2e26-bba7-4ad1-807d-74e683b917a7","keyName":"e2e-rate-a-eea4df","selected_subscription":"e2e-rate-iso-a-eea4df","selected_subscription_key":"ai-tenant-e2e-shared-a-d05e31/e2e-rate-iso-a-eea4df@ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eea4df","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15253ec-1d6b-44c2-9002-b74c8b1e3eed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53418","PortSpecifier":{"PortValue":53418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53418","PortSpecifier":{"PortValue":53418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341977,"nanos":607687341},"http":{"id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75891e9e-77bd-4404-9bfe-4884f15f8a49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60802","PortSpecifier":{"PortValue":60802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60802","PortSpecifier":{"PortValue":60802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341977,"nanos":647928339},"http":{"id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"]}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/71b7cc217a57"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=616b9aac-625c-42e9-bbb3-581b6686d7b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69970284-fdb4-491b-90c5-f2238d2fbe6e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea067abf-ff90-4c9d-872e-3b3d293dd2a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53428","PortSpecifier":{"PortValue":53428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","method":"POST","path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53428","PortSpecifier":{"PortValue":53428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341977,"nanos":687022280},"http":{"id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U8g2W2bQHEqUt3jv_IlTMpXKZ9JvQUWSl6PJOHqZEDLrfg8j47rYTGGz4mWb"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U8g2W2bQHEqUt3jv_IlTMpXKZ9JvQUWSl6PJOHqZEDLrfg8j47rYTGGz4mWb\"}"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f04c015b-3c24-49dd-b427-f75642bffe0a","keyName":"e2e-rate-a-16ac7f","subscription":"e2e-rate-iso-a-16ac7f","tenant":"e2e-shared-a-d05e31","userId":"f04c015b-3c24-49dd-b427-f75642bffe0a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\",\"requestedSubscription\":\"e2e-rate-iso-a-16ac7f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ac7f","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ac7f"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f04c015b-3c24-49dd-b427-f75642bffe0a","keyName":"e2e-rate-a-16ac7f","selected_subscription":"e2e-rate-iso-a-16ac7f","selected_subscription_key":"ai-tenant-e2e-shared-a-d05e31/e2e-rate-iso-a-16ac7f@ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ac7f","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cb9caea-5a0e-4c9a-85da-982c7fc4ec76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53430","PortSpecifier":{"PortValue":53430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20a1186a-eefe-418c-a8b6-319a839552c5","method":"POST","path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53430","PortSpecifier":{"PortValue":53430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341978,"nanos":724146044},"http":{"id":"20a1186a-eefe-418c-a8b6-319a839552c5","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U8g2W2bQHEqUt3jv_IlTMpXKZ9JvQUWSl6PJOHqZEDLrfg8j47rYTGGz4mWb"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U8g2W2bQHEqUt3jv_IlTMpXKZ9JvQUWSl6PJOHqZEDLrfg8j47rYTGGz4mWb\"}"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f04c015b-3c24-49dd-b427-f75642bffe0a","keyName":"e2e-rate-a-16ac7f","subscription":"e2e-rate-iso-a-16ac7f","tenant":"e2e-shared-a-d05e31","userId":"f04c015b-3c24-49dd-b427-f75642bffe0a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\",\"requestedSubscription\":\"e2e-rate-iso-a-16ac7f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ac7f","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ac7f"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f04c015b-3c24-49dd-b427-f75642bffe0a","keyName":"e2e-rate-a-16ac7f","selected_subscription":"e2e-rate-iso-a-16ac7f","selected_subscription_key":"ai-tenant-e2e-shared-a-d05e31/e2e-rate-iso-a-16ac7f@ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ac7f","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20a1186a-eefe-418c-a8b6-319a839552c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42110","PortSpecifier":{"PortValue":42110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","method":"POST","path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions","host":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42110","PortSpecifier":{"PortValue":42110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341979,"nanos":758883466},"http":{"id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","method":"POST","headers":{":authority":"e2e-shared-a-d05e31.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U8g2W2bQHEqUt3jv_IlTMpXKZ9JvQUWSl6PJOHqZEDLrfg8j47rYTGGz4mWb"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U8g2W2bQHEqUt3jv_IlTMpXKZ9JvQUWSl6PJOHqZEDLrfg8j47rYTGGz4mWb\"}"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f04c015b-3c24-49dd-b427-f75642bffe0a","keyName":"e2e-rate-a-16ac7f","subscription":"e2e-rate-iso-a-16ac7f","tenant":"e2e-shared-a-d05e31","userId":"f04c015b-3c24-49dd-b427-f75642bffe0a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\",\"requestedSubscription\":\"e2e-rate-iso-a-16ac7f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d05e31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ac7f","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d05e31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ac7f"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f04c015b-3c24-49dd-b427-f75642bffe0a","keyName":"e2e-rate-a-16ac7f","selected_subscription":"e2e-rate-iso-a-16ac7f","selected_subscription_key":"ai-tenant-e2e-shared-a-d05e31/e2e-rate-iso-a-16ac7f@ai-tenant-e2e-shared-a-d05e31/rate-test-model-d05e31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d05e31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ac7f","namespace":"ai-tenant-e2e-shared-a-d05e31","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae86e25e-a673-49f6-9ee0-15b9b20ac1eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53676","PortSpecifier":{"PortValue":53676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a15531d-988a-4448-a7f3-54d51a9dc359","method":"POST","path":"/ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e/v1/completions","host":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53676","PortSpecifier":{"PortValue":53676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784341979,"nanos":797378397},"http":{"id":"4a15531d-988a-4448-a7f3-54d51a9dc359","method":"POST","headers":{":authority":"e2e-shared-b-f0c43e.apps.31773992-8c53-4d5c-9371-71b7cc217a57.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LbvLBoC3Gli1y6oE_QOwHkCCBIRFFpkizkmmfumiProa1iBLhge74RQa6kOy"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LbvLBoC3Gli1y6oE_QOwHkCCBIRFFpkizkmmfumiProa1iBLhge74RQa6kOy\"}"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d053b991-567b-4172-9621-6b0a4d3305b5","keyName":"e2e-rate-b-16ac7f","subscription":"e2e-rate-iso-b-16ac7f","tenant":"e2e-shared-b-f0c43e","userId":"d053b991-567b-4172-9621-6b0a4d3305b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e\",\"requestedSubscription\":\"e2e-rate-iso-b-16ac7f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0c43e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f0c43e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-16ac7f","namespace":"ai-tenant-e2e-shared-b-f0c43e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0c43e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-16ac7f"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d053b991-567b-4172-9621-6b0a4d3305b5","keyName":"e2e-rate-b-16ac7f","selected_subscription":"e2e-rate-iso-b-16ac7f","selected_subscription_key":"ai-tenant-e2e-shared-b-f0c43e/e2e-rate-iso-b-16ac7f@ai-tenant-e2e-shared-b-f0c43e/rate-test-model-f0c43e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f0c43e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-16ac7f","namespace":"ai-tenant-e2e-shared-b-f0c43e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a15531d-988a-4448-a7f3-54d51a9dc359","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c06bd0a5460b5a87b964d34b7b2529757627cf33d3cd38c4f590acec111f6f0"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24bd96b2228fd25945f5af887a0ac4ec4f5fc0be0321b6cbfb5b83bcde4cd23"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a789be1eb133850c4973fbfdcb2ec2538bea825d0557396099a728e1d622731"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9331ef10b93e91eb3bd5ac770ba50da3cf03074cef07e830f7ce4bd235cda03d"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebdca25cf5d792e3763ceeb230c3be028e21d1b96e5fd53e076a2a447b86c89"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5abfba2d8c2da5289c767d2cc74a47b00eecd264f49197495a11552d99c2627"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ec3c2ece781ecec8103e6d9246f69780ab19e8d9f31f4dbcff57819e34bd90"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb9b1b61ddd87f207b4e8c0c6ef2fa16bbf336ed575679e1d84965f750e2b58a"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fd4d779285d6d3775d1609e10c4fc8a5bc3282f7257515b45d426c3c54e4037"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b427c4494310786fc6bf8378ef1be220f56a19683730a874c250b4d8bfaa1f"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd201d9ec694ae22abbbb4f475236cd2d7712c62edb7551cd64f064a1f7a62c9"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27c9ca2b63a6e30d3756160213f7f8202ed37328f2e6658159bf8ea6901eedc0"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c64b3116f0c90cbbcaa0dffe23818d31019bb9b3addae7e094a9d8e25933de0"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0db2b8bce4b69b04ccf8a2895c737c6d44fad82e7f700fe07401f1a5de03acb"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0eeee09a5b8eacca82631569629cd44ae4692a290e3a810c07b9c182e84843"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55065157b6afc7a58b182493192df6fa9f95efe78a65f4bdf20bcca65abb1a"} {"level":"info","ts":"2026-07-18T02:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86924f30c69d5edb7dfee0ab1ddad7391bfb774c962d0a130e8b3ed63905d26d"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/399dfe9d5dbefef92293bc5b7cf20b59bb39b2451501d3c5da1c417d1c78fcda"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/126fd0238ca00bd9d25c7247c945cfc28864c9b8632b610743181e6023f30f96"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11b9b51f80f14ef44a16f0d3aecd591532dd9e50365d74721c5f31fdd3cf11da"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d795d47ed98a363caa03c28fcd9ea431f6a72219a7e75483adccc92ccc17b741"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68c58d6f57acfb8a1777d365d167bf6389276cbd459c6040d40ab560fba82397"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd32842dd9f5202d11f067e238b4a5fb5e49e1a6c2248961efe3c197c613b008"} {"level":"info","ts":"2026-07-18T02:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e97b7f638ce4b79868146b191c8589a7ed5dacc8b916b0e8b77e40733eeaf36"}