--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-22T03:39:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"error","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46806","PortSpecifier":{"PortValue":46806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46806","PortSpecifier":{"PortValue":46806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691574,"nanos":320696070},"http":{"id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/auth-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6da191f7-7e73-4045-8a6d-4493a2fbf018","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40340","PortSpecifier":{"PortValue":40340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40340","PortSpecifier":{"PortValue":40340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691574,"nanos":356199127},"http":{"id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/auth-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"849e3946-9266-44a7-9b0b-6a5ca2da5edd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46814","PortSpecifier":{"PortValue":46814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0377881a-cbac-4824-ac02-4f0533cb7042","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46814","PortSpecifier":{"PortValue":46814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691574,"nanos":406532605},"http":{"id":"0377881a-cbac-4824-ac02-4f0533cb7042","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/auth-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0377881a-cbac-4824-ac02-4f0533cb7042","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40356","PortSpecifier":{"PortValue":40356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40356","PortSpecifier":{"PortValue":40356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691574,"nanos":441900677},"http":{"id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/auth-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbc47436-a1a5-401d-8e19-ea4a8ccfcf98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"error","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"error","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56218","PortSpecifier":{"PortValue":56218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56218","PortSpecifier":{"PortValue":56218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691593,"nanos":960901724},"http":{"id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/auth-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"951013c4-c50c-4dfc-9719-0d9cfb1f5c2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35358","PortSpecifier":{"PortValue":35358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35358","PortSpecifier":{"PortValue":35358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691593,"nanos":998764057},"http":{"id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/auth-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d7485b1-8f4d-41a5-a17f-a1b3e33da764","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35362","PortSpecifier":{"PortValue":35362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","method":"GET","path":"/maas-api/v1/api-keys/c952fb57-b229-48e1-8219-27a3f375d8a4","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35362","PortSpecifier":{"PortValue":35362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691594,"nanos":37453133},"http":{"id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","method":"GET","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c952fb57-b229-48e1-8219-27a3f375d8a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c952fb57-b229-48e1-8219-27a3f375d8a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/auth-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c19dbdf5-47d2-42da-8e7a-63d1c5d94154","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","method":"GET","path":"/maas-api/v1/api-keys/c952fb57-b229-48e1-8219-27a3f375d8a4","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691594,"nanos":70224498},"http":{"id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","method":"GET","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c952fb57-b229-48e1-8219-27a3f375d8a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c952fb57-b229-48e1-8219-27a3f375d8a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/auth-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee363607-a4e9-456e-ab2d-e88d7daf073f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"error","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34408","PortSpecifier":{"PortValue":34408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a3ea80-cb18-44d9-b980-194f202d6407","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34408","PortSpecifier":{"PortValue":34408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691611,"nanos":425880394},"http":{"id":"45a3ea80-cb18-44d9-b980-194f202d6407","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/auth-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a3ea80-cb18-44d9-b980-194f202d6407","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46790","PortSpecifier":{"PortValue":46790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46790","PortSpecifier":{"PortValue":46790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691611,"nanos":491572144},"http":{"id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/auth-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe8e39f-f39e-48ac-8951-ea72a15424bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34410","PortSpecifier":{"PortValue":34410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34410","PortSpecifier":{"PortValue":34410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691611,"nanos":529711193},"http":{"id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1A6xDKNys5tWgo7Tb_u95H0lLgyTvzFRwTAKMQcNInZQ55b0ohO8xTlocl9D"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1A6xDKNys5tWgo7Tb_u95H0lLgyTvzFRwTAKMQcNInZQ55b0ohO8xTlocl9D\"}"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c46484e0-82b3-4982-bf5c-9ea033d9628b","keyName":"e2e-auth-iso-a-e86b49","subscription":"e2e-auth-iso-a21ff9","tenant":"e2e-shared-a-c19e4b","userId":"c46484e0-82b3-4982-bf5c-9ea033d9628b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/auth-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a21ff9"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da71fae1-1753-4f8a-8e7a-01bde9d8fa3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dc55c01ce224cfec0a727784d130e1f4f4c9b032c5d2d9411c12f10344f637d"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ee9cb6536540019a3ba1c2741ef40cc93a00eeb1f8b520c9aaaefb63c62ed5"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6df8017bfb1ee003ca0e9dbe37988628e18799089b33d6b3fc983e2077d8fff"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01eadaaff2a0d811afd90ac664328bdb16258b37a70808204ff8dbe1598b8746"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0344d8dc47bf0e4e8aadacdaa083410cdb2f9e92c6548ee0dc0193831b1af2ee"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2edab9a3a6f570d4ed7bc5a7242cc4031b22ad4183342858193a2c0dc4c23ca9"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5694e15fba1589908143e8554a1170fd5eefa916f50d98f27794a7be1e69f6"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8439ab5714b42f76d43ba7dbd40a743eaf73978a11590c09116f279526cab8"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a19c9ff9c17e607ba926de35a056521b1d0e4c6c96d0557231c20221af1216ce"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b910fb488ff95ca057dde09b641813736b695efcf1739fd2205e2c57fdc3a1e3"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa6f8468f473852fbfed25743d500fc1282965a7df3b688303f85ffdfe83086c"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba549b5a3cd28fe35b67ea20bebc70268bd1812b532467a29b156995b4b1ed7"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b584c2428d17041f918bc934ac33d965d99c7301d1620e4aada10cc8c9f523"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a55554078cbbd4aaabb3c9a1799d7fb8eee6a7b9573f9ee2e3f000502980c82c"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f23a41392f881380d9d43728a711ef314a22a91855e2a33fc6072c4afb45f0"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164639fc2b152c5b7d9b6435d557a7db481ca42de97e2092af5e7630e22446bd"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"error","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1"} {"level":"info","ts":"2026-07-22T03:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"error","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42320","PortSpecifier":{"PortValue":42320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42320","PortSpecifier":{"PortValue":42320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691688,"nanos":36911593},"http":{"id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/sub-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f813a52-f354-418a-b0ff-70a1a3a9f791","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53810","PortSpecifier":{"PortValue":53810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba88ee3-5926-4491-80df-3b9778a7c150","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53810","PortSpecifier":{"PortValue":53810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691688,"nanos":79805399},"http":{"id":"cba88ee3-5926-4491-80df-3b9778a7c150","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/sub-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba88ee3-5926-4491-80df-3b9778a7c150","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42326","PortSpecifier":{"PortValue":42326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42326","PortSpecifier":{"PortValue":42326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691688,"nanos":120419733},"http":{"id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","method":"GET","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lRKJlcE8mmJeIFL5_xmTJS58W2ixMAyCRoRs16ehFDLpcLUGTfFxYWxqYXno"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lRKJlcE8mmJeIFL5_xmTJS58W2ixMAyCRoRs16ehFDLpcLUGTfFxYWxqYXno\"}"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2bab746-15d1-4f98-bf5f-1132e4643cd4","keyName":"e2e-sub-iso-bd7d9e","subscription":"e2e-a-only-8dbd3b","tenant":"e2e-shared-a-c19e4b","userId":"a2bab746-15d1-4f98-bf5f-1132e4643cd4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/sub-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8dbd3b"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b522cb0-f115-44b1-aa17-64fa5fdae086","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53812","PortSpecifier":{"PortValue":53812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53812","PortSpecifier":{"PortValue":53812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691688,"nanos":171911254},"http":{"id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","method":"GET","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5ik65dbMvri134Mg_rDavxJbDI1r0H92zXGhIWjqcmOP5Ma3xWNda6QU9Uga"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5ik65dbMvri134Mg_rDavxJbDI1r0H92zXGhIWjqcmOP5Ma3xWNda6QU9Uga\"}"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af057c27-4947-4950-97b6-ed61d915235f","keyName":"e2e-sub-iso-8e2a4c","subscription":"e2e-b-only-8dbd3b","tenant":"e2e-shared-b-49462a","userId":"af057c27-4947-4950-97b6-ed61d915235f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/sub-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8dbd3b"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ef0daec-7632-4b66-a948-b0c32c0f5432","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"error","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"error","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"error","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38830","PortSpecifier":{"PortValue":38830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38830","PortSpecifier":{"PortValue":38830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691704,"nanos":899654484},"http":{"id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/sub-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79803e8-9bf9-4a5f-853c-ed3cb9081eb6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52590","PortSpecifier":{"PortValue":52590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52590","PortSpecifier":{"PortValue":52590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691704,"nanos":943435858},"http":{"id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/sub-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba0deb0b-1df1-4f35-be3d-dfcbe809f556","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38844","PortSpecifier":{"PortValue":38844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ad02b3c-d926-406f-b8db-8f278db17072","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38844","PortSpecifier":{"PortValue":38844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691704,"nanos":977010354},"http":{"id":"0ad02b3c-d926-406f-b8db-8f278db17072","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3eJLzJHlqcnZXjmt_QxHV3unpDIxHlTJRMUXaA7G4BnYQo2wT2W65qvhtSMr"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3eJLzJHlqcnZXjmt_QxHV3unpDIxHlTJRMUXaA7G4BnYQo2wT2W65qvhtSMr\"}"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c547a6b6-f4a7-440a-a1a7-99fdeb8fe524","keyName":"e2e-sub-iso-240a40","subscription":"e2e-shared-sub-5eb867","tenant":"e2e-shared-a-c19e4b","userId":"c547a6b6-f4a7-440a-a1a7-99fdeb8fe524","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/sub-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5eb867"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ad02b3c-d926-406f-b8db-8f278db17072","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52594","PortSpecifier":{"PortValue":52594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc1c109a-d1bd-4af9-9536-718b774413b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52594","PortSpecifier":{"PortValue":52594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691705,"nanos":13997049},"http":{"id":"dc1c109a-d1bd-4af9-9536-718b774413b2","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TbYdFX4TWR619qg5_yZJYENJlM3n1MrbWtaKTjpQCgM7CYbHKNx4XTXrRuXQ"} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TbYdFX4TWR619qg5_yZJYENJlM3n1MrbWtaKTjpQCgM7CYbHKNx4XTXrRuXQ\"}"} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a02738-ad67-4ae7-b8df-4a045e66f0e0","keyName":"e2e-sub-iso-d45f52","subscription":"e2e-shared-sub-5eb867","tenant":"e2e-shared-b-49462a","userId":"e4a02738-ad67-4ae7-b8df-4a045e66f0e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/sub-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5eb867"} {"level":"info","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc1c109a-d1bd-4af9-9536-718b774413b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59eea58073c95ce6e1c1944d488ebcd355930ebe5a4b1228af8a5df2c39deff9"} {"level":"info","ts":"2026-07-22T03:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c1ae638fe8930e53f71c6efed5d98aeb0922f3495c49ba7c23f61479f808a7a"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18643e5ac7ebd169c815ff5fd49e95c7ea6affcb06007b37782e05561c9717e1"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccc5783a1a47114f68263f4c5d132c6a80c76cd5c2587dce721e4c426be6901b"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95be201df660a125ebe0674521a94018ce8cec4bcf28b80eb72f3935964943c1"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8415136fbccaee65b0f8246ab3f2a5aa05c770d4113499977507219a467887f6"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4fba657528852fe8c9408014bc23970ac7c3c166ee58fe55877009276ef08b4"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5099ede67cf3dff69605aa0ac08350cca2cd8d642bfd2b6a76b6df9fffdbc52a"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a14c81ec21838f9214a54fb066ab9a6932a5a59a6075a39b43b568c4b31a0f5f"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9693fe916dd7885ce0a2a2ee7fa337cfe70a6c820f13a69e4cdc569abedf941c"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45b0b0363779dd637d2bc7f38a47d33f1d6e438e98ab70d9f282daf35c6222bd"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e2209fd259352c9a6f71cf490976665fd0b39fb39bea17cb984bf5c859c986"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8ae5724cfc469b5c04ec4eb69951da0c3c07365781fcaf511e7b699e84ab0c"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d6f5357dbe7b2ec88f12f69a59ca4eb6b618549e97f80c568eebef6fbc6d353"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc2cf041a44d2b3ef4f2192d634946240a7a18d6fc760dc49f318e89110b68ac"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eacd23b42bf8d73ad5aa6e1b2a1fc3856af863c6b79f1c2a561475f5c38be193"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3"} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588"} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"error","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6667182-8434-4a2a-898d-9725bc136001","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51832","PortSpecifier":{"PortValue":51832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6667182-8434-4a2a-898d-9725bc136001","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6667182-8434-4a2a-898d-9725bc136001","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51832","PortSpecifier":{"PortValue":51832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691770,"nanos":857863957},"http":{"id":"a6667182-8434-4a2a-898d-9725bc136001","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6667182-8434-4a2a-898d-9725bc136001","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6667182-8434-4a2a-898d-9725bc136001","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6667182-8434-4a2a-898d-9725bc136001","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6667182-8434-4a2a-898d-9725bc136001","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6667182-8434-4a2a-898d-9725bc136001","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59984","PortSpecifier":{"PortValue":59984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ce968c0-9120-44ad-99b6-995a3950efac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59984","PortSpecifier":{"PortValue":59984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691770,"nanos":901744527},"http":{"id":"5ce968c0-9120-44ad-99b6-995a3950efac","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ce968c0-9120-44ad-99b6-995a3950efac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691770,"nanos":945215059},"http":{"id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29adeb23-e396-4dfa-9a44-891f92a88ce7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51858","PortSpecifier":{"PortValue":51858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51858","PortSpecifier":{"PortValue":51858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691772,"nanos":5947568},"http":{"id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9da03b-951a-4c55-8013-7c9d9f2eb27d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51862","PortSpecifier":{"PortValue":51862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51862","PortSpecifier":{"PortValue":51862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691773,"nanos":51910594},"http":{"id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2166da7e-d510-4a47-a21d-c1f29ad5d28a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51874","PortSpecifier":{"PortValue":51874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51874","PortSpecifier":{"PortValue":51874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691774,"nanos":92937360},"http":{"id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31b27176-57be-4bfb-a7be-e0ab0b01dd1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55498","PortSpecifier":{"PortValue":55498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8245867b-402f-47a2-b5e5-26d0f5d19497","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55498","PortSpecifier":{"PortValue":55498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691775,"nanos":132092678},"http":{"id":"8245867b-402f-47a2-b5e5-26d0f5d19497","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8245867b-402f-47a2-b5e5-26d0f5d19497","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55502","PortSpecifier":{"PortValue":55502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55502","PortSpecifier":{"PortValue":55502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691776,"nanos":175797914},"http":{"id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5e0a303-9a7e-4751-89bd-bc85f618cdb0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691777,"nanos":215770826},"http":{"id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"343cfebd-63ce-41ee-a8fb-f88557b5f2b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55522","PortSpecifier":{"PortValue":55522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56f25733-e29d-4d53-8605-75c32b65eb17","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55522","PortSpecifier":{"PortValue":55522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691778,"nanos":256055577},"http":{"id":"56f25733-e29d-4d53-8605-75c32b65eb17","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPlpa7INDAyuY34M_MsSKpOtsQogMOpoI3V1RcMyd4YfiL4SbWsGi8OsII1G\"}"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","subscription":"e2e-rate-iso-a-772c0a","tenant":"e2e-shared-a-c19e4b","userId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-772c0a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-772c0a"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b63fb306-44d2-482f-97fd-8321b1a9a0d9","keyName":"e2e-rate-a-772c0a","selected_subscription":"e2e-rate-iso-a-772c0a","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-772c0a@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-772c0a","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:42:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f25733-e29d-4d53-8605-75c32b65eb17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46428","PortSpecifier":{"PortValue":46428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46428","PortSpecifier":{"PortValue":46428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691787,"nanos":118481770},"http":{"id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d6dd9cc-e2ce-49f7-8521-728d1aaaceb6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32868","PortSpecifier":{"PortValue":32868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32868","PortSpecifier":{"PortValue":32868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691787,"nanos":156899145},"http":{"id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"]}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36514607a2a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d085c3e5-0159-4e5b-8e92-50e0181da8da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0c970c12-f680-4c3b-8d8b-2fbdb5d0c826","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccd2587e-ca6a-4948-a11d-1881cf78f85e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"552900a3-a9a1-40de-a299-20d12735540a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46432","PortSpecifier":{"PortValue":46432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"552900a3-a9a1-40de-a299-20d12735540a","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"552900a3-a9a1-40de-a299-20d12735540a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46432","PortSpecifier":{"PortValue":46432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691787,"nanos":195371665},"http":{"id":"552900a3-a9a1-40de-a299-20d12735540a","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sQwH2J7hWDD0K8ji_yZA5jQgSopKvwllqAfIz2utFeNMLU6icbkHbwEFJOpt"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sQwH2J7hWDD0K8ji_yZA5jQgSopKvwllqAfIz2utFeNMLU6icbkHbwEFJOpt\"}"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","keyName":"e2e-rate-a-b18cc6","subscription":"e2e-rate-iso-a-b18cc6","tenant":"e2e-shared-a-c19e4b","userId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-b18cc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b18cc6","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"552900a3-a9a1-40de-a299-20d12735540a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b18cc6"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552900a3-a9a1-40de-a299-20d12735540a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","keyName":"e2e-rate-a-b18cc6","selected_subscription":"e2e-rate-iso-a-b18cc6","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-b18cc6@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b18cc6","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"552900a3-a9a1-40de-a299-20d12735540a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"552900a3-a9a1-40de-a299-20d12735540a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46448","PortSpecifier":{"PortValue":46448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a16e806-9959-4bcb-8921-04662b98ccd6","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46448","PortSpecifier":{"PortValue":46448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691788,"nanos":236445408},"http":{"id":"9a16e806-9959-4bcb-8921-04662b98ccd6","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sQwH2J7hWDD0K8ji_yZA5jQgSopKvwllqAfIz2utFeNMLU6icbkHbwEFJOpt"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sQwH2J7hWDD0K8ji_yZA5jQgSopKvwllqAfIz2utFeNMLU6icbkHbwEFJOpt\"}"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","keyName":"e2e-rate-a-b18cc6","subscription":"e2e-rate-iso-a-b18cc6","tenant":"e2e-shared-a-c19e4b","userId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-b18cc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b18cc6","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b18cc6"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","keyName":"e2e-rate-a-b18cc6","selected_subscription":"e2e-rate-iso-a-b18cc6","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-b18cc6@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b18cc6","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:43:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a16e806-9959-4bcb-8921-04662b98ccd6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46454","PortSpecifier":{"PortValue":46454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","method":"POST","path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions","host":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46454","PortSpecifier":{"PortValue":46454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691789,"nanos":273014808},"http":{"id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","method":"POST","headers":{":authority":"e2e-shared-a-c19e4b.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sQwH2J7hWDD0K8ji_yZA5jQgSopKvwllqAfIz2utFeNMLU6icbkHbwEFJOpt"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sQwH2J7hWDD0K8ji_yZA5jQgSopKvwllqAfIz2utFeNMLU6icbkHbwEFJOpt\"}"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","keyName":"e2e-rate-a-b18cc6","subscription":"e2e-rate-iso-a-b18cc6","tenant":"e2e-shared-a-c19e4b","userId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\",\"requestedSubscription\":\"e2e-rate-iso-a-b18cc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c19e4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b18cc6","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c19e4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b18cc6"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2fefcbf8-8bdb-4d85-bed1-1ca528371cc4","keyName":"e2e-rate-a-b18cc6","selected_subscription":"e2e-rate-iso-a-b18cc6","selected_subscription_key":"ai-tenant-e2e-shared-a-c19e4b/e2e-rate-iso-a-b18cc6@ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c19e4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b18cc6","namespace":"ai-tenant-e2e-shared-a-c19e4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c19e4b/rate-test-model-c19e4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8488b56b-0db8-47b4-a966-b4aeaa30762f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617e90fb-df44-49a0-a40b-27d443680275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32880","PortSpecifier":{"PortValue":32880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"617e90fb-df44-49a0-a40b-27d443680275","method":"POST","path":"/ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a/v1/completions","host":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617e90fb-df44-49a0-a40b-27d443680275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32880","PortSpecifier":{"PortValue":32880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784691789,"nanos":310455376},"http":{"id":"617e90fb-df44-49a0-a40b-27d443680275","method":"POST","headers":{":authority":"e2e-shared-b-49462a.apps.03ef608a-8688-4dc4-a5e2-36514607a2a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-78RKleHOR9w50ODz_C9bG8ZTw7cJOdq9e7KUiWSkF5AXQPyj2QnUaaW5Qggd"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-78RKleHOR9w50ODz_C9bG8ZTw7cJOdq9e7KUiWSkF5AXQPyj2QnUaaW5Qggd\"}"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba3e46cf-bcaf-4f29-8ce3-f37fcfe8f22d","keyName":"e2e-rate-b-b18cc6","subscription":"e2e-rate-iso-b-b18cc6","tenant":"e2e-shared-b-49462a","userId":"ba3e46cf-bcaf-4f29-8ce3-f37fcfe8f22d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a\",\"requestedSubscription\":\"e2e-rate-iso-b-b18cc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-49462a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-49462a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b18cc6","namespace":"ai-tenant-e2e-shared-b-49462a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a"}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"617e90fb-df44-49a0-a40b-27d443680275","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-49462a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b18cc6"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617e90fb-df44-49a0-a40b-27d443680275","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba3e46cf-bcaf-4f29-8ce3-f37fcfe8f22d","keyName":"e2e-rate-b-b18cc6","selected_subscription":"e2e-rate-iso-b-b18cc6","selected_subscription_key":"ai-tenant-e2e-shared-b-49462a/e2e-rate-iso-b-b18cc6@ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-49462a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b18cc6","namespace":"ai-tenant-e2e-shared-b-49462a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-49462a/rate-test-model-49462a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617e90fb-df44-49a0-a40b-27d443680275","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617e90fb-df44-49a0-a40b-27d443680275","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c074cf0d9f895b28aaf22d6888808b4de1d5f111ba7f61b89afdc3b607ffc2b"} {"level":"info","ts":"2026-07-22T03:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c03a81876f4336c9bfa1c56dc0fab4269c1393ee02259c06313f83d4efdd588"} {"level":"info","ts":"2026-07-22T03:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5ada7bce80f38886733dcaeed5caa97b34cc3ab849997db0dbdae2b7aa79887"} {"level":"info","ts":"2026-07-22T03:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cb489a50ed14b72f668e650c0b5e479f4674d5244e280ba24f6c30722d38549"} {"level":"info","ts":"2026-07-22T03:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b45be70dd45113a55f2a2e6147eeb3f0a5f878fae01f0be7ad83d77aeb4e1a9"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51adefb5d430d79dc44efc60aa97ee0f19023242fb7d3abb3e3c975f03c7eb50"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7744f835ef7f97d0c2d17a4de6d3fb148ac337162c32236464e5db08d576dcb9"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2aae19561f993522a8387dfc749c2690a2f2d12c643eb8f47fe50357c40dbe47"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4ee092bfe0638421f6a13f57c9708839d8c966fdf2b65ebe2700359e05a8a7c"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3fe09ada65b5e2d602ec6b3505624cce986e4c605cc70bf4696999e449ae87f"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de888262180acf66a72cbe05a0c1ee84c49b92108203b222ac9b59cb79db7d41"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cfa12454d53eb5f3baf6e774220b711fb38638d6984b5c1af0e86d5aaf5ce3c"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38c53347c1e1da7460ad89e419a3b3dcb886e1da77a6b4882433daa750e6e0d3"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6146eb60986a45508951e86a55f0e76c8b02464c2990e3f17fe3d20aae996390"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1378d872a344b5583de658fb21fc1b65776b447916e7406fddc2e0bee31cc603"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d23e683d10c0d33c30394d49c6cf3195e8968ae536719add70812004b5835df"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12ae599ae0e3a3266d6c2197e1a2d78739af89f32598de1b8bb8fe2d398fc7a9"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84028799cbe4e0b5813d615efb32e5fc1b60108beedcf91e99fbf07e9390738"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74165cc3d5f289210788205601ce9a86fccec81b7b1f0bb4a7e4786f26ccce42"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef6a6ac1853486c03591d26b90a8dc43f0ff423a52112c3072caa20375ee5de8"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb0b789438daa9e1010068c22458b1e3fa503c41675341645386107501991a2"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80338cfd35f735627c4b466ab6e22c136ba04b327d69eb4ab97947bb5802b655"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3057df86b9709e20414d1f627c0494e104835ecb80ab0f8a836c75dd8f64605c"} {"level":"info","ts":"2026-07-22T03:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9aec82b6f203bc0951441c5501ce31206f26428ed0a5398f63f32372200b492"}