--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"error","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"error","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"error","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"error","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38490","PortSpecifier":{"PortValue":38490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7733529b-31c3-40cc-bd78-8fa37153650c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38490","PortSpecifier":{"PortValue":38490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915313,"nanos":108926022},"http":{"id":"7733529b-31c3-40cc-bd78-8fa37153650c","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/auth-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7733529b-31c3-40cc-bd78-8fa37153650c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34806","PortSpecifier":{"PortValue":34806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05742591-52c8-45a7-9537-b67101e8ec7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34806","PortSpecifier":{"PortValue":34806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915313,"nanos":149115196},"http":{"id":"05742591-52c8-45a7-9537-b67101e8ec7e","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/auth-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05742591-52c8-45a7-9537-b67101e8ec7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38500","PortSpecifier":{"PortValue":38500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38500","PortSpecifier":{"PortValue":38500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915313,"nanos":193065491},"http":{"id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/auth-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a76bfac4-1198-4fa0-954b-8dd7f4448278","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34816","PortSpecifier":{"PortValue":34816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34816","PortSpecifier":{"PortValue":34816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915313,"nanos":232559699},"http":{"id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/auth-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ee0880-3445-42ff-81a5-101e2c5b3f8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34674","PortSpecifier":{"PortValue":34674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b105ece1-7782-43c0-84a1-b2175d53e251","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34674","PortSpecifier":{"PortValue":34674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915330,"nanos":523019386},"http":{"id":"b105ece1-7782-43c0-84a1-b2175d53e251","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/auth-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b105ece1-7782-43c0-84a1-b2175d53e251","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47742","PortSpecifier":{"PortValue":47742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5281543d-4d71-42a9-8abd-d15071b358e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47742","PortSpecifier":{"PortValue":47742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915330,"nanos":560708934},"http":{"id":"5281543d-4d71-42a9-8abd-d15071b358e8","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/auth-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5281543d-4d71-42a9-8abd-d15071b358e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47744","PortSpecifier":{"PortValue":47744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a210c97e-29bc-4961-bb70-beb220ffdace","method":"GET","path":"/maas-api/v1/api-keys/8998fb71-1640-435e-8d62-73483d412c02","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47744","PortSpecifier":{"PortValue":47744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915330,"nanos":605040118},"http":{"id":"a210c97e-29bc-4961-bb70-beb220ffdace","method":"GET","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8998fb71-1640-435e-8d62-73483d412c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8998fb71-1640-435e-8d62-73483d412c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/auth-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a210c97e-29bc-4961-bb70-beb220ffdace","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34676","PortSpecifier":{"PortValue":34676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f982ac9f-45cb-40d6-8244-649a9b23149a","method":"GET","path":"/maas-api/v1/api-keys/8998fb71-1640-435e-8d62-73483d412c02","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34676","PortSpecifier":{"PortValue":34676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915330,"nanos":641580695},"http":{"id":"f982ac9f-45cb-40d6-8244-649a9b23149a","method":"GET","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8998fb71-1640-435e-8d62-73483d412c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8998fb71-1640-435e-8d62-73483d412c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/auth-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f982ac9f-45cb-40d6-8244-649a9b23149a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"error","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49002","PortSpecifier":{"PortValue":49002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49002","PortSpecifier":{"PortValue":49002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915350,"nanos":64986040},"http":{"id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/auth-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cb22bff-8d31-485e-bf98-d5dfa7ad32c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41842","PortSpecifier":{"PortValue":41842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41842","PortSpecifier":{"PortValue":41842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915350,"nanos":113922192},"http":{"id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/auth-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb1f1b7-086e-437c-93b6-0345d19579d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49012","PortSpecifier":{"PortValue":49012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49012","PortSpecifier":{"PortValue":49012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915350,"nanos":150111780},"http":{"id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bu8ZsQ7jfTbDRYMZ_8A5eRKUVbNX4O45WAcJ0KW7QusuHk8I7FbUlvIveOcU"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bu8ZsQ7jfTbDRYMZ_8A5eRKUVbNX4O45WAcJ0KW7QusuHk8I7FbUlvIveOcU\"}"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c90d32bc-8936-44e7-839d-3160c8326869","keyName":"e2e-auth-iso-a-7f02f8","subscription":"e2e-auth-iso-65b74d","tenant":"e2e-shared-a-13c2c7","userId":"c90d32bc-8936-44e7-839d-3160c8326869","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/auth-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-65b74d"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f158b4-92a5-4561-ad98-e8c93e5ee4f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44e9bd6b36156653b82d784c468664b3dc44366b662d1f74c8f075eb93a3cc99"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f00e83cb1e53e257628a3fa10a1c6bcd7d8c496e02847d6cfeec0566afaa25b"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39aa7fe653aa350fbf10d11ceeb155097fbcc128e3e51c5c53617d8562458291"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ad4f0876d7cfd19dd5675ce4aa5ec018b89c2d226cb230229da96453ef548a"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db2f827ab4c4a6f44348ee9a741ab5fb6b2dcbc3bc836d1dece87dcae4dda05"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0122f8d203465012a526fbc2b6ebd7089b7a1750fb90df1d391103f09a1d0372"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2abda366b22051ae2b7c9f7b06879c20e5170ad8538857967f68120df141e540"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bc7401ea521acf9b21fdc5c6ce6d8b02570f35cf2913921198fcf3cb4ba14aa"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7da934dec877e82093176a89bc1ebfdb3b58b8e326064b3795ab46eb99477edd"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e1e8de0a45bf5c52b559349f0832901bf8fb6bdd8db1c84c31a360676517d11"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a3e5ad8893592a167296ff5e847e948d3cd151b278b923c0590e04388e0f4e"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2166fe21ed31c208bb7832e4c850030bfe9a06d7a93dd31bb58fd5d9d8bc7714"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/197a3942ae2c840a9a07a1c3fd3b33913e2ca9d9c5e9bf683fe7d56503517730"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edefaaa627e2fde522aa50d400444ad4b545def9303444f46cae8023ec1aea9c"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feb38088160135699ce3a59a383dc87aaaf3be3b137f7a4a534dafcb750b8034"} {"level":"info","ts":"2026-07-24T17:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e06866eb260f55dc49b930dc74ca51b2e3e5cdd9f0f51ae91f15d0682bd4d84b"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f"} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"error","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"error","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6"} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743"} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695"} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57744","PortSpecifier":{"PortValue":57744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57744","PortSpecifier":{"PortValue":57744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915421,"nanos":615446148},"http":{"id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/sub-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6d22494-48b3-40fa-b0b8-661b9e564bcb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fbd7282-8012-4b33-b078-f3265b748360","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57564","PortSpecifier":{"PortValue":57564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fbd7282-8012-4b33-b078-f3265b748360","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fbd7282-8012-4b33-b078-f3265b748360","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57564","PortSpecifier":{"PortValue":57564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915421,"nanos":658518804},"http":{"id":"4fbd7282-8012-4b33-b078-f3265b748360","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fbd7282-8012-4b33-b078-f3265b748360","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fbd7282-8012-4b33-b078-f3265b748360","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/sub-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbd7282-8012-4b33-b078-f3265b748360","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fbd7282-8012-4b33-b078-f3265b748360","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fbd7282-8012-4b33-b078-f3265b748360","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57758","PortSpecifier":{"PortValue":57758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57758","PortSpecifier":{"PortValue":57758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915421,"nanos":702999890},"http":{"id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","method":"GET","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Me2IQaSQkfNltOQK_WvACOMvbUX6Tdjm9SOVh3tI9eB04RKlWTQsIuWk038H"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Me2IQaSQkfNltOQK_WvACOMvbUX6Tdjm9SOVh3tI9eB04RKlWTQsIuWk038H\"}"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92d53d2-2bb6-4147-9037-42b602ed4691","keyName":"e2e-sub-iso-ada8b8","subscription":"e2e-a-only-038aa8","tenant":"e2e-shared-a-13c2c7","userId":"d92d53d2-2bb6-4147-9037-42b602ed4691","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/sub-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-038aa8"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa62aabc-6ca8-4b57-88f6-9fa84479de4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57568","PortSpecifier":{"PortValue":57568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57568","PortSpecifier":{"PortValue":57568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915421,"nanos":747496821},"http":{"id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","method":"GET","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X1ffQqbZsefSUy7q_BPaMe2y2DIA5rgm1mkkfRUt9lYaTdybKP0g2YYr9UKw"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X1ffQqbZsefSUy7q_BPaMe2y2DIA5rgm1mkkfRUt9lYaTdybKP0g2YYr9UKw\"}"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a797938-5005-4fe7-b03e-fc8c1d351b62","keyName":"e2e-sub-iso-6fc54f","subscription":"e2e-b-only-038aa8","tenant":"e2e-shared-b-b9a122","userId":"2a797938-5005-4fe7-b03e-fc8c1d351b62","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/sub-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-038aa8"} {"level":"info","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2366dd65-17fd-4e9d-a9c3-14cb5f866c45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57354","PortSpecifier":{"PortValue":57354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f7d1607-f865-419b-a28e-00a7424c015e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57354","PortSpecifier":{"PortValue":57354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915440,"nanos":415992945},"http":{"id":"1f7d1607-f865-419b-a28e-00a7424c015e","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/sub-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7d1607-f865-419b-a28e-00a7424c015e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42640","PortSpecifier":{"PortValue":42640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42640","PortSpecifier":{"PortValue":42640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915440,"nanos":455483757},"http":{"id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/sub-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b5006f5-ad53-48da-ac0e-a9edcd94153a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57362","PortSpecifier":{"PortValue":57362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57362","PortSpecifier":{"PortValue":57362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915440,"nanos":491693793},"http":{"id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cQT13mbeb7KaZ2UB_LYR2GSpNhKLWYfnpmIkzB1mBVMBgsH60Le8RgcGYYqG"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cQT13mbeb7KaZ2UB_LYR2GSpNhKLWYfnpmIkzB1mBVMBgsH60Le8RgcGYYqG\"}"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"08d8cc2e-6c75-4c59-ad53-78472e3ef25f","keyName":"e2e-sub-iso-308ed0","subscription":"e2e-shared-sub-0a4285","tenant":"e2e-shared-a-13c2c7","userId":"08d8cc2e-6c75-4c59-ad53-78472e3ef25f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/sub-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0a4285"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ff8f985-dcbf-4baf-ac45-a05d0f4f1a39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42650","PortSpecifier":{"PortValue":42650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eaa17054-b520-44e2-9cbd-c12478a50869","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42650","PortSpecifier":{"PortValue":42650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915440,"nanos":527231790},"http":{"id":"eaa17054-b520-44e2-9cbd-c12478a50869","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1al4CIuS42MOLcLxk_kgKOP813o7JBeaHrGmCjXnLLH9TzqRQWLvRnDQxX1MO"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1al4CIuS42MOLcLxk_kgKOP813o7JBeaHrGmCjXnLLH9TzqRQWLvRnDQxX1MO\"}"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89d56f0f-b7e4-4968-8ade-9b4fe07a7620","keyName":"e2e-sub-iso-f75199","subscription":"e2e-shared-sub-0a4285","tenant":"e2e-shared-b-b9a122","userId":"89d56f0f-b7e4-4968-8ade-9b4fe07a7620","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/sub-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0a4285"} {"level":"info","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaa17054-b520-44e2-9cbd-c12478a50869","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1d4c5a2e3cacca31c3d8cc4e56004158db736306105a6d53e6369c70679a8cf"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d6daa64c242e87397991c6247ba896dc40d8a2a7d3eafb97b9c6dd33e9fbb21"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9883a6cf12acc9c99cdb43e1fa3838c25927838d4e64807fca6518ac38fc0d61"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45408de1753829552702c51267bd3a9d948a3717354463ca92d3595040b109d7"} {"level":"info","ts":"2026-07-24T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36bc9958aff508c0d017bbcf6af72b346324b49daf1b4d2ca0ecf0a1c0535f2a"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3b550fcd1870ae6563e9f087e2dcc3c9382210a508dba8002d1e60c069bf304"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/740f3311e477afbcd1c0f235db8cc6700a8d7acde778f03c5b5fe36d2447e695"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dc9ed1fc0622a38d2f46330b0442386ad026786bcb1716bd022ae354a450743"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dfcb4dd7b6b1dd0487bc0e7babefb42df8c3a79f076586e5c9975f879463674"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ee12f640654f79e753bda199edb18c0507502ee895209c8661dc8c2d57607d8"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36f1cd42d3341611813e1b7e1ae6f89169954504e70027759bb0ba7db9e8ef9f"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17c3db3fdf515658af6aff368441a223ac99da05ab00bb575e2caee8312ea7a6"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d10126d0e3444561d8a44f0a3e1255ee9ddb05e952b7dbe3ee5257f70c0651f"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b96b6b67082c77df876c6638e22b06b1541fc7d0119023cad669ba428a52d089"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4834d3b27d273beb893a13814819b59ff8a7b4234ed0ac8797b7a2f6d836b6ef"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84c30eaeb9d1b471a215835d90951fb545b1101a0660d2532564dcec479c516"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"debug","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"debug","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"debug","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"error","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3"} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"debug","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a"} {"level":"error","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f"} {"level":"info","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"error","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50698","PortSpecifier":{"PortValue":50698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50698","PortSpecifier":{"PortValue":50698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915498,"nanos":888674279},"http":{"id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e985f3-dbda-4697-a21a-af41be48bb3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53480","PortSpecifier":{"PortValue":53480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53480","PortSpecifier":{"PortValue":53480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915498,"nanos":930709707},"http":{"id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6fbc39-fba6-4185-b3f7-2c70c0fa8923","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50712","PortSpecifier":{"PortValue":50712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","method":"POST","path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50712","PortSpecifier":{"PortValue":50712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915498,"nanos":975026213},"http":{"id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BwVumiTVq61gvPTD_xvxOmBseIrfeKk5AduE6eEcklAYgvhskaizeiBYn2Oz"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BwVumiTVq61gvPTD_xvxOmBseIrfeKk5AduE6eEcklAYgvhskaizeiBYn2Oz\"}"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","keyName":"e2e-rate-a-e4d437","subscription":"e2e-rate-iso-a-e4d437","tenant":"e2e-shared-a-13c2c7","userId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\",\"requestedSubscription\":\"e2e-rate-iso-a-e4d437\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e4d437","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:51:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e4d437"} {"level":"debug","ts":"2026-07-24T17:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","keyName":"e2e-rate-a-e4d437","selected_subscription":"e2e-rate-iso-a-e4d437","selected_subscription_key":"ai-tenant-e2e-shared-a-13c2c7/e2e-rate-iso-a-e4d437@ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e4d437","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b01b6f6-8263-4183-bac4-9ecfa022888f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","method":"POST","path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915500,"nanos":58163646},"http":{"id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BwVumiTVq61gvPTD_xvxOmBseIrfeKk5AduE6eEcklAYgvhskaizeiBYn2Oz"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BwVumiTVq61gvPTD_xvxOmBseIrfeKk5AduE6eEcklAYgvhskaizeiBYn2Oz\"}"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","keyName":"e2e-rate-a-e4d437","subscription":"e2e-rate-iso-a-e4d437","tenant":"e2e-shared-a-13c2c7","userId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\",\"requestedSubscription\":\"e2e-rate-iso-a-e4d437\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e4d437","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e4d437"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","keyName":"e2e-rate-a-e4d437","selected_subscription":"e2e-rate-iso-a-e4d437","selected_subscription_key":"ai-tenant-e2e-shared-a-13c2c7/e2e-rate-iso-a-e4d437@ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e4d437","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e9f1a33-d37e-4954-a459-3933f01f49a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57022","PortSpecifier":{"PortValue":57022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30ca59ee-4b74-423a-97fb-37104f121c1a","method":"POST","path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57022","PortSpecifier":{"PortValue":57022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915501,"nanos":97431800},"http":{"id":"30ca59ee-4b74-423a-97fb-37104f121c1a","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BwVumiTVq61gvPTD_xvxOmBseIrfeKk5AduE6eEcklAYgvhskaizeiBYn2Oz"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BwVumiTVq61gvPTD_xvxOmBseIrfeKk5AduE6eEcklAYgvhskaizeiBYn2Oz\"}"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","keyName":"e2e-rate-a-e4d437","subscription":"e2e-rate-iso-a-e4d437","tenant":"e2e-shared-a-13c2c7","userId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\",\"requestedSubscription\":\"e2e-rate-iso-a-e4d437\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e4d437","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e4d437"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"759a8d8d-3ee6-4a95-b466-77cce01ba529","keyName":"e2e-rate-a-e4d437","selected_subscription":"e2e-rate-iso-a-e4d437","selected_subscription_key":"ai-tenant-e2e-shared-a-13c2c7/e2e-rate-iso-a-e4d437@ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e4d437","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ca59ee-4b74-423a-97fb-37104f121c1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48584","PortSpecifier":{"PortValue":48584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afc15a2c-6d10-427e-802b-27b19c45cd14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48584","PortSpecifier":{"PortValue":48584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915518,"nanos":445776318},"http":{"id":"afc15a2c-6d10-427e-802b-27b19c45cd14","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afc15a2c-6d10-427e-802b-27b19c45cd14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35334","PortSpecifier":{"PortValue":35334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35334","PortSpecifier":{"PortValue":35334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915518,"nanos":488259213},"http":{"id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b05ab3e-194e-4adf-9715-a3b59fa1c007","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48586","PortSpecifier":{"PortValue":48586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","method":"POST","path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48586","PortSpecifier":{"PortValue":48586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915518,"nanos":524313940},"http":{"id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Q7dVJcV5A9Nsy6A3_JvimgzsJl9drTpj4DToNpW8eMVqOU2iW5I5ARlk5f9c"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Q7dVJcV5A9Nsy6A3_JvimgzsJl9drTpj4DToNpW8eMVqOU2iW5I5ARlk5f9c\"}"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89a85cb9-3a93-4764-8d29-1546c135bb09","keyName":"e2e-rate-a-6dc3d1","subscription":"e2e-rate-iso-a-6dc3d1","tenant":"e2e-shared-a-13c2c7","userId":"89a85cb9-3a93-4764-8d29-1546c135bb09","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\",\"requestedSubscription\":\"e2e-rate-iso-a-6dc3d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6dc3d1","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6dc3d1"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"89a85cb9-3a93-4764-8d29-1546c135bb09","keyName":"e2e-rate-a-6dc3d1","selected_subscription":"e2e-rate-iso-a-6dc3d1","selected_subscription_key":"ai-tenant-e2e-shared-a-13c2c7/e2e-rate-iso-a-6dc3d1@ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6dc3d1","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92c5ccf9-1408-44ce-a00a-d12b6e9db6bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47840","PortSpecifier":{"PortValue":47840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","method":"POST","path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47840","PortSpecifier":{"PortValue":47840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915519,"nanos":567539169},"http":{"id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Q7dVJcV5A9Nsy6A3_JvimgzsJl9drTpj4DToNpW8eMVqOU2iW5I5ARlk5f9c"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Q7dVJcV5A9Nsy6A3_JvimgzsJl9drTpj4DToNpW8eMVqOU2iW5I5ARlk5f9c\"}"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89a85cb9-3a93-4764-8d29-1546c135bb09","keyName":"e2e-rate-a-6dc3d1","subscription":"e2e-rate-iso-a-6dc3d1","tenant":"e2e-shared-a-13c2c7","userId":"89a85cb9-3a93-4764-8d29-1546c135bb09","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\",\"requestedSubscription\":\"e2e-rate-iso-a-6dc3d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6dc3d1","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6dc3d1"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"89a85cb9-3a93-4764-8d29-1546c135bb09","keyName":"e2e-rate-a-6dc3d1","selected_subscription":"e2e-rate-iso-a-6dc3d1","selected_subscription_key":"ai-tenant-e2e-shared-a-13c2c7/e2e-rate-iso-a-6dc3d1@ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6dc3d1","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25ae011-53e6-4cd2-a8b4-da4cd5fd7a45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47842","PortSpecifier":{"PortValue":47842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1903d376-e04a-4e31-a57e-98eaa6602413","method":"POST","path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions","host":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47842","PortSpecifier":{"PortValue":47842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915520,"nanos":609677230},"http":{"id":"1903d376-e04a-4e31-a57e-98eaa6602413","method":"POST","headers":{":authority":"e2e-shared-a-13c2c7.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Q7dVJcV5A9Nsy6A3_JvimgzsJl9drTpj4DToNpW8eMVqOU2iW5I5ARlk5f9c"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Q7dVJcV5A9Nsy6A3_JvimgzsJl9drTpj4DToNpW8eMVqOU2iW5I5ARlk5f9c\"}"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89a85cb9-3a93-4764-8d29-1546c135bb09","keyName":"e2e-rate-a-6dc3d1","subscription":"e2e-rate-iso-a-6dc3d1","tenant":"e2e-shared-a-13c2c7","userId":"89a85cb9-3a93-4764-8d29-1546c135bb09","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\",\"requestedSubscription\":\"e2e-rate-iso-a-6dc3d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-13c2c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6dc3d1","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-13c2c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6dc3d1"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"89a85cb9-3a93-4764-8d29-1546c135bb09","keyName":"e2e-rate-a-6dc3d1","selected_subscription":"e2e-rate-iso-a-6dc3d1","selected_subscription_key":"ai-tenant-e2e-shared-a-13c2c7/e2e-rate-iso-a-6dc3d1@ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-13c2c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6dc3d1","namespace":"ai-tenant-e2e-shared-a-13c2c7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-13c2c7/rate-test-model-13c2c7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1903d376-e04a-4e31-a57e-98eaa6602413","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35868","PortSpecifier":{"PortValue":35868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","method":"POST","path":"/ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122/v1/completions","host":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35868","PortSpecifier":{"PortValue":35868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915520,"nanos":647164302},"http":{"id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","method":"POST","headers":{":authority":"e2e-shared-b-b9a122.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WxiJ1N4flKjyRmlh_AOCyEaSteszucFaxWU6s8hPtcN5QrDIGmhSGfQQAqJF"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WxiJ1N4flKjyRmlh_AOCyEaSteszucFaxWU6s8hPtcN5QrDIGmhSGfQQAqJF\"}"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"706376a2-91b1-448a-90c6-f7436db074af","keyName":"e2e-rate-b-6dc3d1","subscription":"e2e-rate-iso-b-6dc3d1","tenant":"e2e-shared-b-b9a122","userId":"706376a2-91b1-448a-90c6-f7436db074af","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122\",\"requestedSubscription\":\"e2e-rate-iso-b-6dc3d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9a122.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b9a122","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6dc3d1","namespace":"ai-tenant-e2e-shared-b-b9a122","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122"}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b9a122/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6dc3d1"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"706376a2-91b1-448a-90c6-f7436db074af","keyName":"e2e-rate-b-6dc3d1","selected_subscription":"e2e-rate-iso-b-6dc3d1","selected_subscription_key":"ai-tenant-e2e-shared-b-b9a122/e2e-rate-iso-b-6dc3d1@ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b9a122","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6dc3d1","namespace":"ai-tenant-e2e-shared-b-b9a122","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b9a122/rate-test-model-b9a122"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7124f3b-ac1d-4f44-b75f-a2bbb1d13321","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70195873d4f1a9831211c6720e41ebf0568a9adb99b601ee711f44ec0b14eda3"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea52831b5385980a660ddf32748c3c9e400a40ecedcf7271e0f6b479b9ad8ba"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89b688a86e47c0c5e911effc0e28ebfb77b7d06fecfb70449e41897e7447d1ec"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dd6f6b71a596171bb8f7c50a15e33552c48b46706d8a0e70ff56d7c014e4819"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/213958d20e37a8b2248ddf6d3c34e88d59c052bc9acce9334615ebd14b5d485a"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7dc81077136f20c3e148ac0f7ad08790d3f5622c82583aab93f94ebf79e1d4"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717af9f9fa566e3b44da1ccfe02cb116f6dc7915291dd3e8f6d6fccd1f5d4e2f"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c11bcde828f0d1af0886a8fc83c00bca883d2ccb74db86dc196281516e3100d"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af003d4b6f3c8acc7ec472e2d7d3dca61c84bfc8b579c293210f4193522b02f0"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153f733a486bbc220d0f54ef54d8e1e51a3962dc1323e6b598f75b19c4df0274"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3c8853dfd9be90ad27cb6e486a1a70f6c4208de02ae73d00f4428f57398769a"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a2bd247f91dd5b1fe2b80feb0c3801cf9546a8c79ba37cb170d3e3d0438aff0"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3406a53f6e30cc0d15c7adc290708906dc32c02502a31ba5f71bb03b88d4a9ec"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b73b30ca06cc7b844b344aedab97049b2df7bdf3a74b2472729f6a4a366c3323"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb0fd35328f2e1c9b7f30ff374d622056e8481be1dc70de60a810c96627fb0b"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30be8ed5e3cc9377eaf9ad02fd81864b1ebf0ac586e160492206f47324168255"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eff5ac38e28988a01ed4d87d5e4c35e3a82ba0815fd11fb62cb94b6529d1c19b"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d426978d43f5c227ce126cd37ad15c0f659c1af4c02c6051079106534b6b3ac"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cfb8cc37a1c149af120c1dc0b2111325860de596728fece3d0c0d3aa14edea2"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43554d0392c0a11ad17d78a3c03d2fd69c525674e4ee529e06dd0e413c6565a"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b573a73a63b0944a194e74db86e9182201635a39e453afae5ebabd076e3472f"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7df16bccee8ee2e49c791e00b46e428c505551e6a0dd8fe1496207f2fe9db2"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e612c5104a9c7b2e35f8ca21f2fb885466c2fa4ace607b45f704fad19c93947"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcc2249f1c755060810d15cab1e31dff6c21ce808b8869b59766913faf3103b"} {"level":"info","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915584,"nanos":264372138},"http":{"id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","method":"POST","headers":{":authority":"maas.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"406e09ba-4b74-4642-bb13-aabf0f48ec21","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55008","PortSpecifier":{"PortValue":55008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55008","PortSpecifier":{"PortValue":55008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915584,"nanos":322924840},"http":{"id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","method":"POST","headers":{":authority":"maas.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7NFw17fGMmI0Xwh0_F9v82dvFNGd8KIhCEQrak2KxOkvrafg21StU0jEqdWF"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7NFw17fGMmI0Xwh0_F9v82dvFNGd8KIhCEQrak2KxOkvrafg21StU0jEqdWF\"}"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e41a1c2d-e693-4126-94fd-298f318c2a5c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"e41a1c2d-e693-4126-94fd-298f318c2a5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e41a1c2d-e693-4126-94fd-298f318c2a5c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:53:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eef7426-d0ae-4bc5-8001-39a10ac6ed40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"error","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4"} {"level":"info","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb"} {"level":"info","ts":"2026-07-24T17:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4"} {"level":"info","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43854","PortSpecifier":{"PortValue":43854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-92693f.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43854","PortSpecifier":{"PortValue":43854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915629,"nanos":309473570},"http":{"id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","method":"POST","headers":{":authority":"e2e-ipp-a-92693f.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"]}} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6548fc16a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dcb88b-b02f-4802-9a97-f881426aca98"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7787eb5c-38f5-4b20-ba90-2dabc19dcf5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-92693f.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-92693f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c1aaa71-c821-484e-91ff-f23cd46d74ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43870","PortSpecifier":{"PortValue":43870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","method":"POST","path":"/ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f/v1/chat/completions","host":"e2e-ipp-a-92693f.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43870","PortSpecifier":{"PortValue":43870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915631,"nanos":378030012},"http":{"id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","method":"POST","headers":{":authority":"e2e-ipp-a-92693f.apps.3477253e-65f3-4dc3-be1e-7e6548fc16a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vml5gwl3xzOziL3d_ntbVRRQwWznPcXxdgVM2M0gFUf4XGJH8knPAJZqA2nA"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-92693f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vml5gwl3xzOziL3d_ntbVRRQwWznPcXxdgVM2M0gFUf4XGJH8knPAJZqA2nA\"}"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-92693f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bceef32-8e3f-4770-86f5-ee62f26b0042","keyName":"e2e-ipp-92693f","subscription":"ipp-route-92693f-sub","tenant":"e2e-ipp-a-92693f","userId":"0bceef32-8e3f-4770-86f5-ee62f26b0042","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-92693f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f\",\"requestedSubscription\":\"ipp-route-92693f-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-92693f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-92693f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-92693f-sub","namespace":"ai-tenant-e2e-ipp-a-92693f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f"}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-92693f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-92693f-sub"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bceef32-8e3f-4770-86f5-ee62f26b0042","keyName":"e2e-ipp-92693f","selected_subscription":"ipp-route-92693f-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f-sub@ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-92693f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-92693f-sub","namespace":"ai-tenant-e2e-ipp-a-92693f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-92693f/ipp-route-92693f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:53:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a987d06c-f32a-47a3-b58b-3b6c3e899e80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b906adacc384b65af56cdc546320970483e296afd0beef306771e75e68e2143d"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a45668f2edc7e602fa70d90f7ebe043479f37db9bd2882cad8cc941b4bdb1710"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29dc5c65a8fbed980e6c7a5a2bf8b358f5acdfc0f1a9275044eaa49e6e4b3fc6"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c32f3eb290749dbf933bc56d383f758200d4cbe8c2363d4ebc9c7d489057619"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a3e8ad3a7c77ea3616307a65d76efd7ed1f9fc3ddad7c07ae184ce1eaf0816"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce13847dae218714d3b2d0aa3d59acbef20ff984016eef66a9cc00ef78d6cd42"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9c0e086e6e5bf454e72a27d8da74ba7eb875c31e84eed58c80962f7ff740fa"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce0bc732333a662de6f56c51495639108c762707d113bf95703a9e10acbbf9b"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adc39c23d41e4d6ad0d10bf74c1750931cc1e4401f01f77f42b2cf1e3e8e7aeb"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57212b9f31cdf3190fa98ff775360241d35d95a31426932c467060dc35b0bce4"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f102a68e7667d2f987e4b7170c905c3c31595b7bbffac34a6aa1d511c63eccc6"} {"level":"info","ts":"2026-07-24T17:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395a8b8ec88b9dbfc24278d868eca0de712b640eaeeb69afeed00d9b3f526ac4"}